Overview

overview

7

Static

static

5

9f0d14e4a3...18.exe

windows7-x64

7

9f0d14e4a3...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f0d14e4a3f9d1c37bbb5ce7e77bea44_JaffaCakes118

  • Size

    93KB

  • Sample

    241126-bv9rbatler

  • MD5

    9f0d14e4a3f9d1c37bbb5ce7e77bea44

  • SHA1

    03dd6b3a5025c0dba9086705b81c411027204f83

  • SHA256

    a0602b7d87620ae062a66752ea95986203ef8055abb441e96ba45f4f8bfe9475

  • SHA512

    ee3e427ca6bb394b29ce1ab2ab677f4058f9c392c53db6e90b00c410b9380373a7d3ac875f044e3da97399f2bd2b2e76dda0b385aa4964be5b09b8809aee0381

  • SSDEEP

    1536:SKcR4mjD9r823F1MQ1mkRrbqo5TNBjKixf7edsTMOOPZyyQxxLYxORW86c0:SKcWmjRrz3QQAkBbLTx5KVPgy+uP830

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      9f0d14e4a3f9d1c37bbb5ce7e77bea44_JaffaCakes118

    • Size

      93KB

    • MD5

      9f0d14e4a3f9d1c37bbb5ce7e77bea44

    • SHA1

      03dd6b3a5025c0dba9086705b81c411027204f83

    • SHA256

      a0602b7d87620ae062a66752ea95986203ef8055abb441e96ba45f4f8bfe9475

    • SHA512

      ee3e427ca6bb394b29ce1ab2ab677f4058f9c392c53db6e90b00c410b9380373a7d3ac875f044e3da97399f2bd2b2e76dda0b385aa4964be5b09b8809aee0381

    • SSDEEP

      1536:SKcR4mjD9r823F1MQ1mkRrbqo5TNBjKixf7edsTMOOPZyyQxxLYxORW86c0:SKcWmjRrz3QQAkBbLTx5KVPgy+uP830

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks