Overview

overview

10

Static

static

10

JaffaCakes...54.exe

windows7-x64

7

JaffaCakes...54.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a5488cad8f86df87e8392fa2ee2d2454

  • Size

    321KB

  • Sample

    250118-kr4kkazjdj

  • MD5

    a5488cad8f86df87e8392fa2ee2d2454

  • SHA1

    0315c5c3a77cb27457b878e5957c2f58e3fe4fb2

  • SHA256

    202333c643ef48e05f881c5fb61ab2ad8a9f54f84adafa76e3776f7f4287e9b9

  • SHA512

    4ccdcc69ac14c2f4de22939b0de981ce93506de6954f22a90fdbaecf14aaa36f554894b2d2c3371948259e247dc06f5bc3272ec57f6e0c5eefc74bbde9baf7be

  • SSDEEP

    3072:YL9o6xJXHarVvl5ia3dXmkKI2yJKX63hn6c380z+BaL4KIgzL9o6xJXHarVvl5iS:YL5JXWlDlNKIdKqd6mqBa0QL5JXWlDr

Score
10/10
revengeratpersistencespywarestealer

Malware Config

Targets

    • Target

      JaffaCakes118_a5488cad8f86df87e8392fa2ee2d2454

    • Size

      321KB

    • MD5

      a5488cad8f86df87e8392fa2ee2d2454

    • SHA1

      0315c5c3a77cb27457b878e5957c2f58e3fe4fb2

    • SHA256

      202333c643ef48e05f881c5fb61ab2ad8a9f54f84adafa76e3776f7f4287e9b9

    • SHA512

      4ccdcc69ac14c2f4de22939b0de981ce93506de6954f22a90fdbaecf14aaa36f554894b2d2c3371948259e247dc06f5bc3272ec57f6e0c5eefc74bbde9baf7be

    • SSDEEP

      3072:YL9o6xJXHarVvl5ia3dXmkKI2yJKX63hn6c380z+BaL4KIgzL9o6xJXHarVvl5iS:YL5JXWlDlNKIdKqd6mqBa0QL5JXWlDr

    Score
    7/10
    persistencespywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks