General

  • Target

    dba2cd7530ea08dac9399a1b49d7b183_JaffaCakes118

  • Size

    43KB

  • Sample

    240406-fej8yabf56

  • MD5

    dba2cd7530ea08dac9399a1b49d7b183

  • SHA1

    b0f7ca5414369083d785b6becbf18949ef529cc3

  • SHA256

    6c14a950252d9fa0d8d90c9d013182abd5e244b4e40cdb2151e336ffa879d41b

  • SHA512

    80d234854659b99924a8e5da23b496fbd33dafc63521413fa8fba3c49a28aed68c6867082a4c42cc7f768545ef3b9a7493463fc319e90031bfeb1dcc353e5a66

  • SSDEEP

    768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIo3ooFpZh7ivVOmROyMZ:egKcR4mjD9r82xo3X7mVOmRkZ

Malware Config

Targets

    • Target

      dba2cd7530ea08dac9399a1b49d7b183_JaffaCakes118

    • Size

      43KB

    • MD5

      dba2cd7530ea08dac9399a1b49d7b183

    • SHA1

      b0f7ca5414369083d785b6becbf18949ef529cc3

    • SHA256

      6c14a950252d9fa0d8d90c9d013182abd5e244b4e40cdb2151e336ffa879d41b

    • SHA512

      80d234854659b99924a8e5da23b496fbd33dafc63521413fa8fba3c49a28aed68c6867082a4c42cc7f768545ef3b9a7493463fc319e90031bfeb1dcc353e5a66

    • SSDEEP

      768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIo3ooFpZh7ivVOmROyMZ:egKcR4mjD9r82xo3X7mVOmRkZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks