Overview

overview

10

Static

static

10

44b70e5c83...18.exe

windows7-x64

7

44b70e5c83...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44b70e5c83c493b3ae96fca7f29dac2c_JaffaCakes118

  • Size

    349KB

  • Sample

    240515-f52wnsbc6t

  • MD5

    44b70e5c83c493b3ae96fca7f29dac2c

  • SHA1

    7823d6cc1748ae69ce19cf422e5837414b1d5838

  • SHA256

    94eddddb37b71fa6c5ba941e251f8b133df3768c969bb4984ff9db76c6c991ea

  • SHA512

    c1f9d1e269e335aa1d3fd47dc9bbf0b950d82fafb489b46e743c171d93baef7722c840958fc87da6004c264228d47432c41135e5116be5c8617576ed99d5cfa8

  • SSDEEP

    6144:t77hTTSQ4W8OTD1LfPXJduYFv9qAI4TEJTvcD157rHfZSXHEY5QjTmERgymn/mhx:tXIpUD1LfPXRR9qAI4Tkvcx57rHfo5QH

Score
10/10
pandastealerspywarestealer

Malware Config

Extracted

Family

pandastealer

Version

1.10

C2

http://u843854nsj.ha004.t.justns.ru

Targets

    • Target

      44b70e5c83c493b3ae96fca7f29dac2c_JaffaCakes118

    • Size

      349KB

    • MD5

      44b70e5c83c493b3ae96fca7f29dac2c

    • SHA1

      7823d6cc1748ae69ce19cf422e5837414b1d5838

    • SHA256

      94eddddb37b71fa6c5ba941e251f8b133df3768c969bb4984ff9db76c6c991ea

    • SHA512

      c1f9d1e269e335aa1d3fd47dc9bbf0b950d82fafb489b46e743c171d93baef7722c840958fc87da6004c264228d47432c41135e5116be5c8617576ed99d5cfa8

    • SSDEEP

      6144:t77hTTSQ4W8OTD1LfPXJduYFv9qAI4TEJTvcD157rHfZSXHEY5QjTmERgymn/mhx:tXIpUD1LfPXRR9qAI4Tkvcx57rHfo5QH

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks