a049ef15af81082d52427d53bfaf45cdad2959833954b06c437fdc2f3545f3c0 | Triage

Sharing

General

Target

fbd6db946429019d7020557a9e0061a7_JaffaCakes118
Size

185KB
Sample

240928-jskcmsxcng
MD5

fbd6db946429019d7020557a9e0061a7
SHA1

c6b586d299c139fe1e8ae58bb4167aef79c72d2b
SHA256

a049ef15af81082d52427d53bfaf45cdad2959833954b06c437fdc2f3545f3c0
SHA512

0035327a7736bf703098f3cfe8e6d7194f5d47464ba43aa9a6551a65c58c5fbdd3a43ad91ec38f5247d1eb8bf80fcb837ddf02e0462519b1620da4b9ff897025
SSDEEP

3072:Xgbr6MsRktSjArkKoBrGLBMIjjKVBRV1FgxK8f1IpkMKy82/92V7B9KhLXQ7EgeO:Ax3ScjuGeIjjQRVToK8f1Ipk3y82/U7W

Score

7^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  fbd6db946429019d7020557a9e0061a7_JaffaCakes118
- Size
  
  185KB
- MD5
  
  fbd6db946429019d7020557a9e0061a7
- SHA1
  
  c6b586d299c139fe1e8ae58bb4167aef79c72d2b
- SHA256
  
  a049ef15af81082d52427d53bfaf45cdad2959833954b06c437fdc2f3545f3c0
- SHA512
  
  0035327a7736bf703098f3cfe8e6d7194f5d47464ba43aa9a6551a65c58c5fbdd3a43ad91ec38f5247d1eb8bf80fcb837ddf02e0462519b1620da4b9ff897025
- SSDEEP
  
  3072:Xgbr6MsRktSjArkKoBrGLBMIjjKVBRV1FgxK8f1IpkMKy82/92V7B9KhLXQ7EgeO:Ax3ScjuGeIjjQRVToK8f1Ipk3y82/U7W
Score

7^/10

discovery persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2