Overview

overview

7

Static

static

3

4470c8c08b...18.exe

windows7-x64

7

4470c8c08b...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4470c8c08bac5da0e115bce20bdb97cd_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241014-17vklaygpg

  • MD5

    4470c8c08bac5da0e115bce20bdb97cd

  • SHA1

    d23e3ad02f0e97a2cbb0fa1d494520b8a1c0ee5f

  • SHA256

    306908f31f435a84e3eeb6a246fb621406c18d0ae3321a791b3e0ff3373edf63

  • SHA512

    be01941260cdaa013f1152d978eb63be6c197051193920e24560fb0a4f9334fee37a9951f6afde646393be2cac0d279e631c4231fed54f92503b2c06f97b47c3

  • SSDEEP

    24576:4oRoh4s7G8FFFCwVZX8d+1qNfSEuMGGRmV0WqQ7lN3MeDKT0diXew:3RomsS0vX1CqiEewiIdXw

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      4470c8c08bac5da0e115bce20bdb97cd_JaffaCakes118

    • Size

      1.0MB

    • MD5

      4470c8c08bac5da0e115bce20bdb97cd

    • SHA1

      d23e3ad02f0e97a2cbb0fa1d494520b8a1c0ee5f

    • SHA256

      306908f31f435a84e3eeb6a246fb621406c18d0ae3321a791b3e0ff3373edf63

    • SHA512

      be01941260cdaa013f1152d978eb63be6c197051193920e24560fb0a4f9334fee37a9951f6afde646393be2cac0d279e631c4231fed54f92503b2c06f97b47c3

    • SSDEEP

      24576:4oRoh4s7G8FFFCwVZX8d+1qNfSEuMGGRmV0WqQ7lN3MeDKT0diXew:3RomsS0vX1CqiEewiIdXw

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks