Overview

overview

7

Static

static

3

fbd5d0aeb5...18.exe

windows7-x64

7

fbd5d0aeb5...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbd5d0aeb5c99d627b5fd234a3c1bb6a_JaffaCakes118

  • Size

    356KB

  • Sample

    240928-jqthjavcll

  • MD5

    fbd5d0aeb5c99d627b5fd234a3c1bb6a

  • SHA1

    931e0a22dea700ab2ebfd22cd5386ccb047d5f24

  • SHA256

    d8c09e328bee42dac7172225f165e008f21888304ad4e8be7900b8f205be3e77

  • SHA512

    7288d674151095a18f2033024266c6a698f9d8bcc08c30605ef52413e2e48df0af7e995e636b944d34842b68ee89e65163acd1c35a2426ac927e86986739120e

  • SSDEEP

    6144:dGPy6MqYL2w664ADU+9PTLG/nLmEFLpexQyKrvQbBXHf4DSnuoTTRaz:Ia6M9L2w6ODUCPTa/nLT/oKrvWXHfVk

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      fbd5d0aeb5c99d627b5fd234a3c1bb6a_JaffaCakes118

    • Size

      356KB

    • MD5

      fbd5d0aeb5c99d627b5fd234a3c1bb6a

    • SHA1

      931e0a22dea700ab2ebfd22cd5386ccb047d5f24

    • SHA256

      d8c09e328bee42dac7172225f165e008f21888304ad4e8be7900b8f205be3e77

    • SHA512

      7288d674151095a18f2033024266c6a698f9d8bcc08c30605ef52413e2e48df0af7e995e636b944d34842b68ee89e65163acd1c35a2426ac927e86986739120e

    • SSDEEP

      6144:dGPy6MqYL2w664ADU+9PTLG/nLmEFLpexQyKrvQbBXHf4DSnuoTTRaz:Ia6M9L2w6ODUCPTa/nLT/oKrvWXHfVk

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks