b86cc509c74bd45e74bdd72b338846fc25a36d7916e53c48360a6ffb706bac42 | Triage

Sharing

General

Target

54f13cf7dd1a8e5022ad8a33e7baaf90_JaffaCakes118
Size

181KB
Sample

241018-crwkys1djh
MD5

54f13cf7dd1a8e5022ad8a33e7baaf90
SHA1

3741a5f6f9fa0b96a51a87fc39e3a68701b756e0
SHA256

b86cc509c74bd45e74bdd72b338846fc25a36d7916e53c48360a6ffb706bac42
SHA512

c0782a68e87185866857410b56d7aff478f4fccbb46dcffe7d23f4fb2408e554f525eb99f0619a9166cb2cb18dbc2708615f4e7326e2da49458777c2669095ef
SSDEEP

3072:kEV6M1TNBRI/KKmfHFuPWgxB02tJHGHw7ZRjz3GvVkOfkc2ynl:/V6myW0BNNZNWvVbi

Score

7^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  54f13cf7dd1a8e5022ad8a33e7baaf90_JaffaCakes118
- Size
  
  181KB
- MD5
  
  54f13cf7dd1a8e5022ad8a33e7baaf90
- SHA1
  
  3741a5f6f9fa0b96a51a87fc39e3a68701b756e0
- SHA256
  
  b86cc509c74bd45e74bdd72b338846fc25a36d7916e53c48360a6ffb706bac42
- SHA512
  
  c0782a68e87185866857410b56d7aff478f4fccbb46dcffe7d23f4fb2408e554f525eb99f0619a9166cb2cb18dbc2708615f4e7326e2da49458777c2669095ef
- SSDEEP
  
  3072:kEV6M1TNBRI/KKmfHFuPWgxB02tJHGHw7ZRjz3GvVkOfkc2ynl:/V6myW0BNNZNWvVbi
Score

7^/10

discovery persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2