Overview

overview

10

Static

static

3

JaffaCakes...b3.dll

windows7-x64

10

JaffaCakes...b3.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_3a82a71428be734da068097835fa30b3

  • Size

    76KB

  • Sample

    250127-azhmyssqcj

  • MD5

    3a82a71428be734da068097835fa30b3

  • SHA1

    cae4b538516f8e9f1892b66e70b461aeb5e71ddb

  • SHA256

    19cf9ee9771e11f12fa1feafd85782ad9c9658daeb0465da208f3f5962e9751d

  • SHA512

    7f8044aefa94e81b38f63ccf03c62adfc7b1e0a4ea7b1259dd6645e8849f8f1fc63b77b61faaf21847d369b63391f878f365fa15ddbb6feeb49915dc8c2a479c

  • SSDEEP

    1536:v08ycVb3jZUVVS4DgzeZqJvhmjK5ZxMbngWYpaA9HAhWoICEWMPo:/ycV4ieZq1kjKrxMrctghrIlWMg

Score
10/10
ponycredential_accessdiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_3a82a71428be734da068097835fa30b3

    • Size

      76KB

    • MD5

      3a82a71428be734da068097835fa30b3

    • SHA1

      cae4b538516f8e9f1892b66e70b461aeb5e71ddb

    • SHA256

      19cf9ee9771e11f12fa1feafd85782ad9c9658daeb0465da208f3f5962e9751d

    • SHA512

      7f8044aefa94e81b38f63ccf03c62adfc7b1e0a4ea7b1259dd6645e8849f8f1fc63b77b61faaf21847d369b63391f878f365fa15ddbb6feeb49915dc8c2a479c

    • SSDEEP

      1536:v08ycVb3jZUVVS4DgzeZqJvhmjK5ZxMbngWYpaA9HAhWoICEWMPo:/ycV4ieZq1kjKrxMrctghrIlWMg

    Score
    10/10
    ponycredential_accessdiscoveryratspywarestealerupx

    • Pony family

      pony

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

      ratspywarestealerpony

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks