Overview

overview

7

Static

static

5

fa1982e1b0...18.exe

windows7-x64

7

fa1982e1b0...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa1982e1b05fb03264701edd683cad98_JaffaCakes118

  • Size

    557KB

  • Sample

    240927-kt5weavapm

  • MD5

    fa1982e1b05fb03264701edd683cad98

  • SHA1

    c9569d97286008538930f07ba75123f8ecdfcb61

  • SHA256

    e045ecf278499ef88eafc5bc12a1a522ff19b00503c7190de4768170a19c1f3d

  • SHA512

    20975860ae464a77ba5463ccea7e5c90bc5a0bbebb59302c8e328aa4ed80d02ba5c6ddd8912dfe5a3e87acbd2e622d97f60d0d46a7001ba7a2005a1cd82fdd9c

  • SSDEEP

    12288:fGPsgmaWFZBXD4m6mxYq3G0qEq2t/uKXMMTr:fGPshVFLXXxYuQEqSZXMMTr

Score
7/10
discoveryspywarestealerupx

Malware Config

Targets

    • Target

      fa1982e1b05fb03264701edd683cad98_JaffaCakes118

    • Size

      557KB

    • MD5

      fa1982e1b05fb03264701edd683cad98

    • SHA1

      c9569d97286008538930f07ba75123f8ecdfcb61

    • SHA256

      e045ecf278499ef88eafc5bc12a1a522ff19b00503c7190de4768170a19c1f3d

    • SHA512

      20975860ae464a77ba5463ccea7e5c90bc5a0bbebb59302c8e328aa4ed80d02ba5c6ddd8912dfe5a3e87acbd2e622d97f60d0d46a7001ba7a2005a1cd82fdd9c

    • SSDEEP

      12288:fGPsgmaWFZBXD4m6mxYq3G0qEq2t/uKXMMTr:fGPshVFLXXxYuQEqSZXMMTr

    Score
    7/10
    discoveryspywarestealerupx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks