Overview

overview

7

Static

static

5

094d5ac57b...18.exe

windows7-x64

7

094d5ac57b...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    094d5ac57bf7c9a2d5b0c766cb702e20_JaffaCakes118

  • Size

    33KB

  • Sample

    241002-g5teza1fmm

  • MD5

    094d5ac57bf7c9a2d5b0c766cb702e20

  • SHA1

    fb96dbdaa1b65a7805eddfe6323c884da5a05501

  • SHA256

    75535f7f25bd2592f1c79be97130cb8a0d5cdb06e5ddd790fdf7359ffd3ee6ec

  • SHA512

    2e4b0ba59d5625d54e8314bcc2b946200bd083f847a81c10c1e05602ab08e38e9387a4fe2a7db1b2d3bfa1d24e13d72f5c3dbbd1bb419f138f4535443650b4db

  • SSDEEP

    768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIoT0/R:egKcR4mjD9r82P/R

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      094d5ac57bf7c9a2d5b0c766cb702e20_JaffaCakes118

    • Size

      33KB

    • MD5

      094d5ac57bf7c9a2d5b0c766cb702e20

    • SHA1

      fb96dbdaa1b65a7805eddfe6323c884da5a05501

    • SHA256

      75535f7f25bd2592f1c79be97130cb8a0d5cdb06e5ddd790fdf7359ffd3ee6ec

    • SHA512

      2e4b0ba59d5625d54e8314bcc2b946200bd083f847a81c10c1e05602ab08e38e9387a4fe2a7db1b2d3bfa1d24e13d72f5c3dbbd1bb419f138f4535443650b4db

    • SSDEEP

      768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIoT0/R:egKcR4mjD9r82P/R

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks