Overview

overview

7

Static

static

3

1b7c4174fc...18.exe

windows7-x64

7

1b7c4174fc...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b7c4174fc9746ca04a658a17fa058af_JaffaCakes118

  • Size

    6.3MB

  • Sample

    240701-qs85bsthpd

  • MD5

    1b7c4174fc9746ca04a658a17fa058af

  • SHA1

    ce5ae7058e597e93cdc754e7add668071e146514

  • SHA256

    a3e50318e152d676e087ecd36ed64c83d9a5a378725483265a8c8dbd8231b3d5

  • SHA512

    2564c878690cd9b1999a06f9705c6aaad8cdf582e0a9cab68d67bdb52a6ea9b513137c6657ff6dbadc355fe9255d70b161b1376f906dcec395cabc2177bf63e3

  • SSDEEP

    196608:fkZdShWAAd8qASRx/rWInNvJsUNSchkiDhb:Hh+WInHNLz

Score
7/10
pyinstallerspywarestealer

Malware Config

Targets

    • Target

      1b7c4174fc9746ca04a658a17fa058af_JaffaCakes118

    • Size

      6.3MB

    • MD5

      1b7c4174fc9746ca04a658a17fa058af

    • SHA1

      ce5ae7058e597e93cdc754e7add668071e146514

    • SHA256

      a3e50318e152d676e087ecd36ed64c83d9a5a378725483265a8c8dbd8231b3d5

    • SHA512

      2564c878690cd9b1999a06f9705c6aaad8cdf582e0a9cab68d67bdb52a6ea9b513137c6657ff6dbadc355fe9255d70b161b1376f906dcec395cabc2177bf63e3

    • SSDEEP

      196608:fkZdShWAAd8qASRx/rWInNvJsUNSchkiDhb:Hh+WInHNLz

    Score
    7/10
    spywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks