General

  • Target

    e56eed158464357f80f853a00f116f0c_JaffaCakes118

  • Size

    120KB

  • Sample

    240407-vnmgzshg97

  • MD5

    e56eed158464357f80f853a00f116f0c

  • SHA1

    8fe20d51eb43fa595cc1f8f4588587c237b0032b

  • SHA256

    147f6e392f4ef9f71e87ca4c96edad03d51135859d4e3ca008f6413dc30a2143

  • SHA512

    6568ee3ce391114807f6280f97fc5106c7e8d8edea44e119965840aab15af0cf112bf81b1a5de567d181968d7365dd23398da45d560f7a0fe8aa32d7de6f8887

  • SSDEEP

    3072:qKtfDwsjPThTYszDH2fEJvxKaCqTBfioo:BtfDwsjPThT5zL2StCqTBNo

Score
7/10

Malware Config

Targets

    • Target

      e56eed158464357f80f853a00f116f0c_JaffaCakes118

    • Size

      120KB

    • MD5

      e56eed158464357f80f853a00f116f0c

    • SHA1

      8fe20d51eb43fa595cc1f8f4588587c237b0032b

    • SHA256

      147f6e392f4ef9f71e87ca4c96edad03d51135859d4e3ca008f6413dc30a2143

    • SHA512

      6568ee3ce391114807f6280f97fc5106c7e8d8edea44e119965840aab15af0cf112bf81b1a5de567d181968d7365dd23398da45d560f7a0fe8aa32d7de6f8887

    • SSDEEP

      3072:qKtfDwsjPThTYszDH2fEJvxKaCqTBfioo:BtfDwsjPThT5zL2StCqTBNo

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks