General

  • Target

    a2b3cb3afb3219dbd1d94594bb208e20_JaffaCakes118

  • Size

    957KB

  • Sample

    240403-whxlfagf74

  • MD5

    a2b3cb3afb3219dbd1d94594bb208e20

  • SHA1

    55cfee7e224acd776788a5824b9e0e2b5a14b95a

  • SHA256

    ca4bd34795e2ca0c3d1620e85b1019d3cec99785ffe6c4712be0fc1a812305fc

  • SHA512

    063a79a83c82e6d1f46827a753ed5e6585f0d24b8eb55ab3a9e2ea50bec36164cda0811dca707d820493d6df43646964c37bd78ba7e83542354dc13a8472b851

  • SSDEEP

    12288:8uPUTLYcAaUMhUhLupXshh1PEd5hOo3fzhai6L3k8UW/M1QwXGB/I:8uPmLDUMihIXCE5Bfsi6rk76MRXGBg

Malware Config

Targets

    • Target

      a2b3cb3afb3219dbd1d94594bb208e20_JaffaCakes118

    • Size

      957KB

    • MD5

      a2b3cb3afb3219dbd1d94594bb208e20

    • SHA1

      55cfee7e224acd776788a5824b9e0e2b5a14b95a

    • SHA256

      ca4bd34795e2ca0c3d1620e85b1019d3cec99785ffe6c4712be0fc1a812305fc

    • SHA512

      063a79a83c82e6d1f46827a753ed5e6585f0d24b8eb55ab3a9e2ea50bec36164cda0811dca707d820493d6df43646964c37bd78ba7e83542354dc13a8472b851

    • SSDEEP

      12288:8uPUTLYcAaUMhUhLupXshh1PEd5hOo3fzhai6L3k8UW/M1QwXGB/I:8uPmLDUMihIXCE5Bfsi6rk76MRXGBg

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks