Overview

overview

7

Static

static

3

41ad0e54df...18.exe

windows7-x64

7

41ad0e54df...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41ad0e54df2967d0ccae2ce1cd3b23ba_JaffaCakes118

  • Size

    447KB

  • Sample

    241013-x8638sthnc

  • MD5

    41ad0e54df2967d0ccae2ce1cd3b23ba

  • SHA1

    b3ba67af979090ec4f856f8b7065b566de6f1805

  • SHA256

    c244f07901ca22d31792111b4bfe643fe87458e4231dcc021e7368eb56c87acd

  • SHA512

    d0fb85ba46317eebcc48c22646f977f34e218c105188573885d1fd684f34857c3d42bcff6ecda6167767e8c6cfaa6b593be6b672228a9bd07fb9614faaaeeb5f

  • SSDEEP

    12288:1vGKHzjSRu3rI9gdRdvLnAC97V392lP7HUeox3:1vG2XhrI+dRdkC9p3MR7e

Score
7/10
credential_accessdiscoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      41ad0e54df2967d0ccae2ce1cd3b23ba_JaffaCakes118

    • Size

      447KB

    • MD5

      41ad0e54df2967d0ccae2ce1cd3b23ba

    • SHA1

      b3ba67af979090ec4f856f8b7065b566de6f1805

    • SHA256

      c244f07901ca22d31792111b4bfe643fe87458e4231dcc021e7368eb56c87acd

    • SHA512

      d0fb85ba46317eebcc48c22646f977f34e218c105188573885d1fd684f34857c3d42bcff6ecda6167767e8c6cfaa6b593be6b672228a9bd07fb9614faaaeeb5f

    • SSDEEP

      12288:1vGKHzjSRu3rI9gdRdvLnAC97V392lP7HUeox3:1vG2XhrI+dRdkC9p3MR7e

    Score
    7/10
    credential_accessdiscoverypersistencespywarestealerupx

    • Credentials from Password Stores: Windows Credential Manager

      Suspicious access to Credentials History.

      credential_accessstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks