General

  • Target

    e581ce7b8b16656bf455ca40da5c1356_JaffaCakes118

  • Size

    93KB

  • Sample

    240407-wd4tysab7y

  • MD5

    e581ce7b8b16656bf455ca40da5c1356

  • SHA1

    0a1c000d9e9d317c283821f2d844bf5b41f22fae

  • SHA256

    a7a2b6b238150db57c8c5bdba1e45ff62e39ce00cc755191b655db0effe56630

  • SHA512

    10e83242ac50eb9696f81e9d77d10135cc368353877a3e27c7f6c9ac0a9fe8afa8cc67cfadb1670f1b9e89f58cc4b7089455313694e4e1988b1469cf5c21029c

  • SSDEEP

    1536:SKcR4mjD9r823Fi+Pt7lmwNK9kAG3Zve0pN0Dh/xUL7/W5BpCHHsDbX:SKcWmjRrz38CrNK9k2MuDhJa/WbpaHsf

Malware Config

Targets

    • Target

      e581ce7b8b16656bf455ca40da5c1356_JaffaCakes118

    • Size

      93KB

    • MD5

      e581ce7b8b16656bf455ca40da5c1356

    • SHA1

      0a1c000d9e9d317c283821f2d844bf5b41f22fae

    • SHA256

      a7a2b6b238150db57c8c5bdba1e45ff62e39ce00cc755191b655db0effe56630

    • SHA512

      10e83242ac50eb9696f81e9d77d10135cc368353877a3e27c7f6c9ac0a9fe8afa8cc67cfadb1670f1b9e89f58cc4b7089455313694e4e1988b1469cf5c21029c

    • SSDEEP

      1536:SKcR4mjD9r823Fi+Pt7lmwNK9kAG3Zve0pN0Dh/xUL7/W5BpCHHsDbX:SKcWmjRrz38CrNK9k2MuDhJa/WbpaHsf

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks