Overview

overview

10

Static

static

7

JaffaCakes...18.exe

windows7-x64

10

JaffaCakes...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ee9a39289b1515a19727989d5aa4ba18

  • Size

    5.6MB

  • Sample

    250110-z68kdszqfj

  • MD5

    ee9a39289b1515a19727989d5aa4ba18

  • SHA1

    5f39c931de7b85579efd964f914a5b4b73f127ee

  • SHA256

    e388278f58445533165adf816fa66770373de91581acfd15f85bc8d33c6b9ae1

  • SHA512

    89569cda298b800e3c3f7be0d074a25465388771fefaaf5b98b5ab955b5f7148454f04fca79c59984e6b441bd094bb7bfb287e7764e03085bac702b8453009a1

  • SSDEEP

    98304:Qr1eZRfOlXDCcQrgVV6EU4YKV6f+LNCFUdjhCgoJIB0BaOXWgMkCCAMOMvuaXwLH:QafONCZgVY46f+6UNPNuXdAMOIULyt8

Score
10/10
pandastealershurkdiscoveryinfostealerspywarestealervmprotect

Malware Config

Targets

    • Target

      JaffaCakes118_ee9a39289b1515a19727989d5aa4ba18

    • Size

      5.6MB

    • MD5

      ee9a39289b1515a19727989d5aa4ba18

    • SHA1

      5f39c931de7b85579efd964f914a5b4b73f127ee

    • SHA256

      e388278f58445533165adf816fa66770373de91581acfd15f85bc8d33c6b9ae1

    • SHA512

      89569cda298b800e3c3f7be0d074a25465388771fefaaf5b98b5ab955b5f7148454f04fca79c59984e6b441bd094bb7bfb287e7764e03085bac702b8453009a1

    • SSDEEP

      98304:Qr1eZRfOlXDCcQrgVV6EU4YKV6f+LNCFUdjhCgoJIB0BaOXWgMkCCAMOMvuaXwLH:QafONCZgVY46f+6UNPNuXdAMOIULyt8

    Score
    10/10
    pandastealershurkdiscoveryinfostealerspywarestealervmprotect

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Pandastealer family

      pandastealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer payload

    • Shurk family

      shurk

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks