Overview

overview

10

Static

static

3

f34cb0f694...18.exe

windows7-x64

10

f34cb0f694...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f34cb0f6946db27a2423dce01b9cd63f_JaffaCakes118

  • Size

    75KB

  • Sample

    240924-k4bqbascmf

  • MD5

    f34cb0f6946db27a2423dce01b9cd63f

  • SHA1

    9fbfcf0defa2c1a04664b7350985180bac5db7b0

  • SHA256

    7931d6d643356390f072a3be89a30706adcf1f9bb542024ad7d3c8fca980b74c

  • SHA512

    654bc11a7b747be06b2e306a8b3683ed0e8df256d56fb7bfc24d006290300c76c1eafaaf542c1dea00538023ef47abfd48c712de975c3f3f153c2c7feccf0328

  • SSDEEP

    1536:D4fc5iRPRGVLK3+Emd3Vx1oJQmF0ID4Utk:DOc5iRPgK3c9oJQSz09

Score
10/10
ponycredential_accessdiscoveryratspywarestealer

Malware Config

Targets

    • Target

      f34cb0f6946db27a2423dce01b9cd63f_JaffaCakes118

    • Size

      75KB

    • MD5

      f34cb0f6946db27a2423dce01b9cd63f

    • SHA1

      9fbfcf0defa2c1a04664b7350985180bac5db7b0

    • SHA256

      7931d6d643356390f072a3be89a30706adcf1f9bb542024ad7d3c8fca980b74c

    • SHA512

      654bc11a7b747be06b2e306a8b3683ed0e8df256d56fb7bfc24d006290300c76c1eafaaf542c1dea00538023ef47abfd48c712de975c3f3f153c2c7feccf0328

    • SSDEEP

      1536:D4fc5iRPRGVLK3+Emd3Vx1oJQmF0ID4Utk:DOc5iRPgK3c9oJQSz09

    Score
    10/10
    ponycredential_accessdiscoveryratspywarestealer

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

      ratspywarestealerpony

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks