Overview

overview

7

Static

static

5

0698d8bc2e...18.exe

windows7-x64

7

0698d8bc2e...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0698d8bc2e029217f5308f971e506c51_JaffaCakes118

  • Size

    59KB

  • Sample

    241001-vbqc4szelj

  • MD5

    0698d8bc2e029217f5308f971e506c51

  • SHA1

    338d3664b2eb996e591d83252ea5fb1b51ff1bce

  • SHA256

    d12bf025e0b9273b4e35b45bb397a72ccddf61b6179911aa9eafdfe70249a2bf

  • SHA512

    0a3169ffd6c077d9752294cfa520927cde7b84c89764d334abe692662f9b0f9b1eb602391b9af4e4709b47add25e85c795568d74219a6320e0685d1689f96e18

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFGocAX3LKew369lp2z3Z:SKcR4mjD9r823FHKcR4mjD9r823FKT

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      0698d8bc2e029217f5308f971e506c51_JaffaCakes118

    • Size

      59KB

    • MD5

      0698d8bc2e029217f5308f971e506c51

    • SHA1

      338d3664b2eb996e591d83252ea5fb1b51ff1bce

    • SHA256

      d12bf025e0b9273b4e35b45bb397a72ccddf61b6179911aa9eafdfe70249a2bf

    • SHA512

      0a3169ffd6c077d9752294cfa520927cde7b84c89764d334abe692662f9b0f9b1eb602391b9af4e4709b47add25e85c795568d74219a6320e0685d1689f96e18

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFGocAX3LKew369lp2z3Z:SKcR4mjD9r823FHKcR4mjD9r823FKT

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks