Overview

overview

7

Static

static

5

00316861bd...18.exe

windows7-x64

7

00316861bd...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    00316861bd2af01780de04afce205b4a_JaffaCakes118

  • Size

    44KB

  • Sample

    240930-jfgqzsshmm

  • MD5

    00316861bd2af01780de04afce205b4a

  • SHA1

    a78f53c912671f5fc1397cc5143b8f3931e18be5

  • SHA256

    72a6433e8b06cfaed56d4dec908c54233ddedc8ba082c27ec11182bea55ba81c

  • SHA512

    11193a9d9596feca6daf670272c942ceb6145e0f46386850364699b8d4968f926d5dd6d9fea251dea857c033a419943ce58cf7d31eff204372bd8e9dd08bee85

  • SSDEEP

    768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIoasuP/s/FMdS5cUTtpClfbdY8OZ:egKcR4mjD9r82waoWSKqtpOT+8+

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      00316861bd2af01780de04afce205b4a_JaffaCakes118

    • Size

      44KB

    • MD5

      00316861bd2af01780de04afce205b4a

    • SHA1

      a78f53c912671f5fc1397cc5143b8f3931e18be5

    • SHA256

      72a6433e8b06cfaed56d4dec908c54233ddedc8ba082c27ec11182bea55ba81c

    • SHA512

      11193a9d9596feca6daf670272c942ceb6145e0f46386850364699b8d4968f926d5dd6d9fea251dea857c033a419943ce58cf7d31eff204372bd8e9dd08bee85

    • SSDEEP

      768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIoasuP/s/FMdS5cUTtpClfbdY8OZ:egKcR4mjD9r82waoWSKqtpOT+8+

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks