Overview

overview

10

Static

static

10

JaffaCakes...b7.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a3c9010e7e940680bc150d18ec65aeb7

  • Size

    220KB

  • Sample

    250409-ht87qasxhx

  • MD5

    a3c9010e7e940680bc150d18ec65aeb7

  • SHA1

    3a291a10f624c14956c66fcdb6ea217af26dc367

  • SHA256

    397301c35712aeb8a1a45001b28026f33c81aa60304923fc33dc053480751afb

  • SHA512

    415c3698f6f65b28413f46e4948d0517dcf0a931288f0b2c0ee839f904b6e77d123d73397266532cf5a7faba95e35e0ddcf4e0d8d30a8559bf8c911b8f0c8488

  • SSDEEP

    6144:UTqPRRdIKCC0ef//uXltKc+LVsz9b8/5e:XdFeCXuLKcCVsz60

Score
10/10
isrstealerdiscoveryspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_a3c9010e7e940680bc150d18ec65aeb7

    • Size

      220KB

    • MD5

      a3c9010e7e940680bc150d18ec65aeb7

    • SHA1

      3a291a10f624c14956c66fcdb6ea217af26dc367

    • SHA256

      397301c35712aeb8a1a45001b28026f33c81aa60304923fc33dc053480751afb

    • SHA512

      415c3698f6f65b28413f46e4948d0517dcf0a931288f0b2c0ee839f904b6e77d123d73397266532cf5a7faba95e35e0ddcf4e0d8d30a8559bf8c911b8f0c8488

    • SSDEEP

      6144:UTqPRRdIKCC0ef//uXltKc+LVsz9b8/5e:XdFeCXuLKcCVsz60

    Score
    7/10
    discoveryspywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks