Overview

overview

10

Static

static

3

3c21a19925...18.exe

windows7-x64

10

3c21a19925...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3c21a19925d3f0a041a10b69c27d87c6_JaffaCakes118

  • Size

    41KB

  • Sample

    241012-1d1jrasdnb

  • MD5

    3c21a19925d3f0a041a10b69c27d87c6

  • SHA1

    33175d01cbf9d836228874d2c996137b447478ab

  • SHA256

    623e0377926a869635b91968ffb41df2bc34ffaf277eb64f57e58bcbc5d016be

  • SHA512

    ff5b0211bb6c7bf193d64c5996644fe6b68a0709ec1e93733934353336d81b719bc70602eb73a9851485388e2cf4d8ba1f2b20ba455e478edbe8b2dba7166b5f

  • SSDEEP

    768:vCYqHQizl8zdRf9Ynf9tiRR5WIWYiAWlFjgonyIltchh+DXM3fkeJ+GQ+Qzb:qYqHQMCdEiRWI0HLnyi6zf3J+8Q

Score
10/10
ponycredential_accessdiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      3c21a19925d3f0a041a10b69c27d87c6_JaffaCakes118

    • Size

      41KB

    • MD5

      3c21a19925d3f0a041a10b69c27d87c6

    • SHA1

      33175d01cbf9d836228874d2c996137b447478ab

    • SHA256

      623e0377926a869635b91968ffb41df2bc34ffaf277eb64f57e58bcbc5d016be

    • SHA512

      ff5b0211bb6c7bf193d64c5996644fe6b68a0709ec1e93733934353336d81b719bc70602eb73a9851485388e2cf4d8ba1f2b20ba455e478edbe8b2dba7166b5f

    • SSDEEP

      768:vCYqHQizl8zdRf9Ynf9tiRR5WIWYiAWlFjgonyIltchh+DXM3fkeJ+GQ+Qzb:qYqHQMCdEiRWI0HLnyi6zf3J+8Q

    Score
    10/10
    ponycredential_accessdiscoveryratspywarestealerupx

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

      ratspywarestealerpony

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks