Overview

overview

7

Static

static

3

8272e03f21...18.exe

windows7-x64

7

8272e03f21...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8272e03f2189e9a7d42cbcb2b237d149_JaffaCakes118

  • Size

    169KB

  • Sample

    241031-ka7kwssqhw

  • MD5

    8272e03f2189e9a7d42cbcb2b237d149

  • SHA1

    c9209eb7a44a88e07cfb4baa6214f9c8173146f5

  • SHA256

    7e2dda1ff76577a9709b8f2d10d65bd5661d916ad2bda573393a61f94ca5e76a

  • SHA512

    8f93895af63741f71a002ed4c0d45700919bae036acd1cd3c2ae67944f661377ed88e82d66ca6246a1042e8cb432d7de31ae5df5a733ce8bfb757fb029da5dfb

  • SSDEEP

    3072:ji+7qmKtwvnfoiLCf6vKOuKzPLUOiKuzd9es1M/7R69pwB071q/S6hGrx:jiU+t2oiLCkuUYO8ztk7s9m0cS6Mrx

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      8272e03f2189e9a7d42cbcb2b237d149_JaffaCakes118

    • Size

      169KB

    • MD5

      8272e03f2189e9a7d42cbcb2b237d149

    • SHA1

      c9209eb7a44a88e07cfb4baa6214f9c8173146f5

    • SHA256

      7e2dda1ff76577a9709b8f2d10d65bd5661d916ad2bda573393a61f94ca5e76a

    • SHA512

      8f93895af63741f71a002ed4c0d45700919bae036acd1cd3c2ae67944f661377ed88e82d66ca6246a1042e8cb432d7de31ae5df5a733ce8bfb757fb029da5dfb

    • SSDEEP

      3072:ji+7qmKtwvnfoiLCf6vKOuKzPLUOiKuzd9es1M/7R69pwB071q/S6hGrx:jiU+t2oiLCkuUYO8ztk7s9m0cS6Mrx

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks