8ea74e344f44984b975d4a0731f1cc54655da6d01a052bb35a8fae8b42b75cc1 | Triage

Submit
Reports

Overview

overview

7

Static

static

5

0bbeaaf877...18.exe

windows7-x64

7

0bbeaaf877...18.exe

windows10-2004-x64

7

Sharing

General

Target

0bbeaaf877b5a9cca3b90cdda4f484f4_JaffaCakes118
Size

478KB
Sample

241002-vv1m7a1gnb
MD5

0bbeaaf877b5a9cca3b90cdda4f484f4
SHA1

af3294ccaff9a4a0de05dc74df2f682aeb6365d8
SHA256

8ea74e344f44984b975d4a0731f1cc54655da6d01a052bb35a8fae8b42b75cc1
SHA512

dc2602177c4f5bfaffb777a8bdada42033e0fc7fdf54c388f768e38a786b0263dc4b003edae4268c7f77bc742638696f9e57ce62a6f37e677b188964be2fdba1
SSDEEP

12288:1c6ZQHix1RP1UDcVsvyaYNTnzQWzH95wMMxwOsFpD:1VeM1UDIZUWzH95wMMxwOWD

Score

7^/10

discovery spyware stealer upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

0bbeaaf877b5a9cca3b90cdda4f484f4_JaffaCakes118.exe

Resource

win7-20240903-en

discovery spyware stealer upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

0bbeaaf877b5a9cca3b90cdda4f484f4_JaffaCakes118.exe

Resource

win10v2004-20240802-en

discovery spyware stealer upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  0bbeaaf877b5a9cca3b90cdda4f484f4_JaffaCakes118
- Size
  
  478KB
- MD5
  
  0bbeaaf877b5a9cca3b90cdda4f484f4
- SHA1
  
  af3294ccaff9a4a0de05dc74df2f682aeb6365d8
- SHA256
  
  8ea74e344f44984b975d4a0731f1cc54655da6d01a052bb35a8fae8b42b75cc1
- SHA512
  
  dc2602177c4f5bfaffb777a8bdada42033e0fc7fdf54c388f768e38a786b0263dc4b003edae4268c7f77bc742638696f9e57ce62a6f37e677b188964be2fdba1
- SSDEEP
  
  12288:1c6ZQHix1RP1UDcVsvyaYNTnzQWzH95wMMxwOsFpD:1VeM1UDIZUWzH95wMMxwOWD
Score

7^/10

discovery spyware stealer upx
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealerupx

behavioral2

discoveryspywarestealerupx

© 2018-2024

Terms | Privacy