Overview

overview

7

Static

static

5

294dafded4...18.exe

windows7-x64

7

294dafded4...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    294dafded4b0f097667490519c7b41ff_JaffaCakes118

  • Size

    1.8MB

  • Sample

    241009-c3kmtsvglq

  • MD5

    294dafded4b0f097667490519c7b41ff

  • SHA1

    d219bd2a013d6ad772d24d2fda887dc4ec0ff250

  • SHA256

    bf351490092b6f9c6594c5ff792a38872c262810ba9175ca9af8710f5d615dc3

  • SHA512

    73baa1cf8d8c5b24dbda2b7ce08c9fe9b3b39d5feee06bba2f0d69314d8e094caf3daeb6bf4314725925675c9ff082ebcc05956c3ce2d24dc32eb254379856be

  • SSDEEP

    49152:SAFkt2qR4/yw7Uj2fhMeBn/1SyISsqiQLCqAmUMImc8xhgWl/GgfJh:tet8awwQhMa/3HsTQLCqRt3Vxh3h

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      294dafded4b0f097667490519c7b41ff_JaffaCakes118

    • Size

      1.8MB

    • MD5

      294dafded4b0f097667490519c7b41ff

    • SHA1

      d219bd2a013d6ad772d24d2fda887dc4ec0ff250

    • SHA256

      bf351490092b6f9c6594c5ff792a38872c262810ba9175ca9af8710f5d615dc3

    • SHA512

      73baa1cf8d8c5b24dbda2b7ce08c9fe9b3b39d5feee06bba2f0d69314d8e094caf3daeb6bf4314725925675c9ff082ebcc05956c3ce2d24dc32eb254379856be

    • SSDEEP

      49152:SAFkt2qR4/yw7Uj2fhMeBn/1SyISsqiQLCqAmUMImc8xhgWl/GgfJh:tet8awwQhMa/3HsTQLCqRt3Vxh3h

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks