71b1faeeacffaa8cc8ea08fd43a66a9374bdba3917b9da5cd96b0f6b00e0bd6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2de75841a1cc5fd7bb3debe0eda1f150_JaffaCakes118
Size

146KB
Sample

241009-kcqedsshjg
MD5

2de75841a1cc5fd7bb3debe0eda1f150
SHA1

346185cf5577f50531adc8745ff6ff65a69eeee5
SHA256

71b1faeeacffaa8cc8ea08fd43a66a9374bdba3917b9da5cd96b0f6b00e0bd6c
SHA512

0626a9bd8fc536cab812ca2f0bcd7483dcc7b89fc49af1e11b2c1fca3970eafd0117deef92c5937dd63b187eeba2f614bcd3890150fd31ca4b86b23eb641eabc
SSDEEP

3072:nWIQ5arboU46cgamFG26wkY/fyWnh6CzF73Epx+1xnN7vTuniVjGD:nHQg86cHm6wkYW0Up0ntSgj2

Score

7^/10

discovery spyware stealer upx

Malware Config

Targets

- Target
  
  2de75841a1cc5fd7bb3debe0eda1f150_JaffaCakes118
- Size
  
  146KB
- MD5
  
  2de75841a1cc5fd7bb3debe0eda1f150
- SHA1
  
  346185cf5577f50531adc8745ff6ff65a69eeee5
- SHA256
  
  71b1faeeacffaa8cc8ea08fd43a66a9374bdba3917b9da5cd96b0f6b00e0bd6c
- SHA512
  
  0626a9bd8fc536cab812ca2f0bcd7483dcc7b89fc49af1e11b2c1fca3970eafd0117deef92c5937dd63b187eeba2f614bcd3890150fd31ca4b86b23eb641eabc
- SSDEEP
  
  3072:nWIQ5arboU46cgamFG26wkY/fyWnh6CzF73Epx+1xnN7vTuniVjGD:nHQg86cHm6wkYW0Up0ntSgj2
Score

7^/10

discovery spyware stealer upx
- Deletes itself
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealerupx

behavioral2

discoveryspywarestealerupx