6340bc38a8a47fead26d86e49c8f9569ba24cd7decb226c48412d2d412b962f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12dfe2704bdd9f5c7757b9d868a61007_JaffaCakes118
Size

158KB
Sample

241004-l2mkgasbnc
MD5

12dfe2704bdd9f5c7757b9d868a61007
SHA1

851abb91fc82acdeee036c8587759f492af76830
SHA256

6340bc38a8a47fead26d86e49c8f9569ba24cd7decb226c48412d2d412b962f0
SHA512

6b4a018eda95381e00cbdbdb558a619eb9486bc0e13f357264ea27cefec915abe93ed500233247ad4d7aed9ef07bed3aea87a713183966d9aac87313c190078c
SSDEEP

3072:Kk/fmhnw4mTICu3IS2KL+gPqw66CT8ZH6UG+JQtzKDCHOMRIi5:Gnwo4FKdP66CToH9GfuMyk

Score

7^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  12dfe2704bdd9f5c7757b9d868a61007_JaffaCakes118
- Size
  
  158KB
- MD5
  
  12dfe2704bdd9f5c7757b9d868a61007
- SHA1
  
  851abb91fc82acdeee036c8587759f492af76830
- SHA256
  
  6340bc38a8a47fead26d86e49c8f9569ba24cd7decb226c48412d2d412b962f0
- SHA512
  
  6b4a018eda95381e00cbdbdb558a619eb9486bc0e13f357264ea27cefec915abe93ed500233247ad4d7aed9ef07bed3aea87a713183966d9aac87313c190078c
- SSDEEP
  
  3072:Kk/fmhnw4mTICu3IS2KL+gPqw66CT8ZH6UG+JQtzKDCHOMRIi5:Gnwo4FKdP66CToH9GfuMyk
Score

7^/10

discovery persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2