Overview

overview

7

Static

static

3

f58a485c76...18.exe

windows7-x64

7

f58a485c76...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f58a485c76bfd9ab28e20996c8d91ef2_JaffaCakes118

  • Size

    64KB

  • Sample

    240925-jrqs2awhnb

  • MD5

    f58a485c76bfd9ab28e20996c8d91ef2

  • SHA1

    8e0f5f514c6a757074205b76558b7fdfaf16ddad

  • SHA256

    47ccf8f1a58e5d7aab9a87151e886a4e36f2190ea05a3a8a1b6cf2b605f07a56

  • SHA512

    5cedbdb014869ae39bd3c782a095f8a3e4aeebf175764c60dfc10ef9396ea6fa181d95548c12b866ba64f5b0cfb4af2ce0848a16fd64240a946bf777170de2e8

  • SSDEEP

    1536:TIeX4JPlmnVFpVgaRAMEJDqBa6unkna2u/:T/ol2LrPEJDqBKp2u

Score
7/10
credential_accessdiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      f58a485c76bfd9ab28e20996c8d91ef2_JaffaCakes118

    • Size

      64KB

    • MD5

      f58a485c76bfd9ab28e20996c8d91ef2

    • SHA1

      8e0f5f514c6a757074205b76558b7fdfaf16ddad

    • SHA256

      47ccf8f1a58e5d7aab9a87151e886a4e36f2190ea05a3a8a1b6cf2b605f07a56

    • SHA512

      5cedbdb014869ae39bd3c782a095f8a3e4aeebf175764c60dfc10ef9396ea6fa181d95548c12b866ba64f5b0cfb4af2ce0848a16fd64240a946bf777170de2e8

    • SSDEEP

      1536:TIeX4JPlmnVFpVgaRAMEJDqBa6unkna2u/:T/ol2LrPEJDqBKp2u

    Score
    7/10
    credential_accessdiscoverypersistencespywarestealer

    • Credentials from Password Stores: Windows Credential Manager

      Suspicious access to Credentials History.

      credential_accessstealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks