Overview

overview

7

Static

static

3

b1b167c3bd...18.exe

windows7-x64

7

b1b167c3bd...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1b167c3bdbd89fced9330cf4b44f2e7_JaffaCakes118

  • Size

    41KB

  • Sample

    241129-raqeyayqdt

  • MD5

    b1b167c3bdbd89fced9330cf4b44f2e7

  • SHA1

    e1d88bb87960f290e3a4d30e5d525fa0665d0e64

  • SHA256

    06c34bd374ee641916ae893d60156b90e670f1f9911078653bcd2535db962510

  • SHA512

    c66b150a9e7dc214fd231402c287114239454a6d11bff7bb0478cf1c72fe9c4e7b02b3daeba417c8750a4fdd2b756f36e38b2aaec7015016bc86d8a3c5ac696f

  • SSDEEP

    768:/cEj862pdUupHCquylm7XI8hqzVP7ach8IxPLNl04OvQ0:nnyyupiquygijFh8GPLNl04Oo0

Score
7/10
credential_accessdiscoveryspywarestealer

Malware Config

Targets

    • Target

      b1b167c3bdbd89fced9330cf4b44f2e7_JaffaCakes118

    • Size

      41KB

    • MD5

      b1b167c3bdbd89fced9330cf4b44f2e7

    • SHA1

      e1d88bb87960f290e3a4d30e5d525fa0665d0e64

    • SHA256

      06c34bd374ee641916ae893d60156b90e670f1f9911078653bcd2535db962510

    • SHA512

      c66b150a9e7dc214fd231402c287114239454a6d11bff7bb0478cf1c72fe9c4e7b02b3daeba417c8750a4fdd2b756f36e38b2aaec7015016bc86d8a3c5ac696f

    • SSDEEP

      768:/cEj862pdUupHCquylm7XI8hqzVP7ach8IxPLNl04OvQ0:nnyyupiquygijFh8GPLNl04Oo0

    Score
    7/10
    credential_accessdiscoveryspywarestealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks