533020ef7182401d4cb5bdf8324f835a9e9edcb23b9a7f0485721cdcf58f532d | Triage

Sharing

General

Target

faf8db027408575c7f6178890e2a9058_JaffaCakes118
Size

125KB
Sample

240927-1swjcatfjh
MD5

faf8db027408575c7f6178890e2a9058
SHA1

e22dc27f9528adf96cad0039eaea83f5b1523510
SHA256

533020ef7182401d4cb5bdf8324f835a9e9edcb23b9a7f0485721cdcf58f532d
SHA512

c996edf150d3978d5dc65901e9c325818dc495d621d7ce286987c28b638a190d20f4494a8cd6b3c52be9b3b5da646ed51cb5da547ce0d234e2520860397122e3
SSDEEP

3072:zVvRYdan7my+GSIL++YATge3z+WW5v8Mlx:zVvSQn7HL+YkVn8ox

Score

7^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  faf8db027408575c7f6178890e2a9058_JaffaCakes118
- Size
  
  125KB
- MD5
  
  faf8db027408575c7f6178890e2a9058
- SHA1
  
  e22dc27f9528adf96cad0039eaea83f5b1523510
- SHA256
  
  533020ef7182401d4cb5bdf8324f835a9e9edcb23b9a7f0485721cdcf58f532d
- SHA512
  
  c996edf150d3978d5dc65901e9c325818dc495d621d7ce286987c28b638a190d20f4494a8cd6b3c52be9b3b5da646ed51cb5da547ce0d234e2520860397122e3
- SSDEEP
  
  3072:zVvRYdan7my+GSIL++YATge3z+WW5v8Mlx:zVvSQn7HL+YkVn8ox
Score

7^/10

discovery persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2