General

  • Target

    fb6a148d58933bfb2453b7ed81c11ec6_JaffaCakes118

  • Size

    2.6MB

  • Sample

    240419-3jzwhsbc6s

  • MD5

    fb6a148d58933bfb2453b7ed81c11ec6

  • SHA1

    af9a9161ef67986033a91866d02365eda16b1632

  • SHA256

    23b4cef95bc3d53a8fb33b3c63377aadb198b65059ff1ab20f925c5006ae421e

  • SHA512

    c048c6f5e3bd0ab1aa69c28840a78889c0c36187eacecffecf33c9462d7ef9d8fbdc3e108da2f0317cf7fccadc5129305771d1a25ea56e634b79d749f1ffe5d2

  • SSDEEP

    49152:+iJHFVvw8AlPAW22lGIO5xXjIvqROlqMdyV8g709EebI8oEDa9u4i:+iJlVvw8qAa85+vddy+ggb+4a3i

Malware Config

Targets

    • Target

      fb6a148d58933bfb2453b7ed81c11ec6_JaffaCakes118

    • Size

      2.6MB

    • MD5

      fb6a148d58933bfb2453b7ed81c11ec6

    • SHA1

      af9a9161ef67986033a91866d02365eda16b1632

    • SHA256

      23b4cef95bc3d53a8fb33b3c63377aadb198b65059ff1ab20f925c5006ae421e

    • SHA512

      c048c6f5e3bd0ab1aa69c28840a78889c0c36187eacecffecf33c9462d7ef9d8fbdc3e108da2f0317cf7fccadc5129305771d1a25ea56e634b79d749f1ffe5d2

    • SSDEEP

      49152:+iJHFVvw8AlPAW22lGIO5xXjIvqROlqMdyV8g709EebI8oEDa9u4i:+iJlVvw8qAa85+vddy+ggb+4a3i

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks