Overview

overview

10

Static

static

5

JaffaCakes...3c.dll

windows7-x64

10

JaffaCakes...3c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_3caaca7a1c79dd6d414aa15a2a331f3c

  • Size

    107KB

  • Sample

    250127-gwz66avmb1

  • MD5

    3caaca7a1c79dd6d414aa15a2a331f3c

  • SHA1

    ede03a0d58b08a604db318bd18dc9b1880b746ac

  • SHA256

    54ccd2c19a648eda593207473a86363886d7f700ff2339c43c6486f5d5f6bcbb

  • SHA512

    184e421ad82b0d9ec3042a6f468fb9f9af3b50957d49c202757526399a6a0d12f040037d44adea1eb994afa844b16fe72cf716ac5f2c379fd1540e3997c180a5

  • SSDEEP

    1536:HS+RsJKtqT+rF3YsOJpB022/XlatiKvwp2zv1E6ekZ3yLBvACD:H9NrmpBS/XlatiKNE6l3y1vT

Score
10/10
ponycredential_accessdiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_3caaca7a1c79dd6d414aa15a2a331f3c

    • Size

      107KB

    • MD5

      3caaca7a1c79dd6d414aa15a2a331f3c

    • SHA1

      ede03a0d58b08a604db318bd18dc9b1880b746ac

    • SHA256

      54ccd2c19a648eda593207473a86363886d7f700ff2339c43c6486f5d5f6bcbb

    • SHA512

      184e421ad82b0d9ec3042a6f468fb9f9af3b50957d49c202757526399a6a0d12f040037d44adea1eb994afa844b16fe72cf716ac5f2c379fd1540e3997c180a5

    • SSDEEP

      1536:HS+RsJKtqT+rF3YsOJpB022/XlatiKvwp2zv1E6ekZ3yLBvACD:H9NrmpBS/XlatiKNE6l3y1vT

    Score
    10/10
    ponycredential_accessdiscoveryratspywarestealerupx

    • Pony family

      pony

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

      ratspywarestealerpony

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks