Analysis
-
max time kernel
151s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
30/03/2024, 22:59
General
-
Target
4689527f10d148468069ee575d34716c_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
4689527f10d148468069ee575d34716c
-
SHA1
c4e6fb7495ce9fc80ff9304d8976e4c0e02506dc
-
SHA256
d292e7388d4cd59fc1fc5efe2e933e453bbbe53a29503a5c6447849afd6f3c09
-
SHA512
492526d830cbe3c2cf399722a314f93096cc2f0cb17f0cd9be871660efba29777bca6d48e08ddbfea44705d1d557b2bdfcbd8adfcd5b9d5c444f0235ad671c15
-
SSDEEP
24576:yzd9Sm6s3SB4VbhzGcHb0bBhXxtyesOlU0YOTAXnA91IV7HExDaIu:yzTSmvdcwb0VhXHlrTKA91IV7HExOIu
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
-
Uses Tor communications 1 TTPs
Malware can proxy its traffic through Tor for more anonymity.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4689527f10d148468069ee575d34716c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4689527f10d148468069ee575d34716c_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22B
MD576cdb2bad9582d23c1f6f4d868218d6c
SHA1b04f3ee8f5e43fa3b162981b50bb72fe1acabb33
SHA2568739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
SHA5125e2f959f36b66df0580a94f384c5fc1ceeec4b2a3925f062d7b68f21758b86581ac2adcfdde73a171a28496e758ef1b23ca4951c05455cdae9357cc3b5a5825f