General

  • Target

    45edcd6d45e55eb775263b9b97607951_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240515-nfkvvseh5v

  • MD5

    45edcd6d45e55eb775263b9b97607951

  • SHA1

    6174b70856b18b6dec93253a89f9488b7cea2f6f

  • SHA256

    b1edf93f350e09878c5f114256f5f58e0d3f1b8f14e2cadfa28ea1f21798cabf

  • SHA512

    be90b15f4586e22dbf7f1b16da142caa990f1f20677b865efa849421c7a462e9bb4264f9e39f6c5049c61b51d739c7cabaa5bc9f1e819bb672e15d62b5e0a947

  • SSDEEP

    24576:zMzzk5YwWv7RB4cXO1NcUSa5mrAW+Rl2+Gxo+tYu6or:zZiCjnmFUl2+K8u6s

Malware Config

Targets

    • Target

      45edcd6d45e55eb775263b9b97607951_JaffaCakes118

    • Size

      1.0MB

    • MD5

      45edcd6d45e55eb775263b9b97607951

    • SHA1

      6174b70856b18b6dec93253a89f9488b7cea2f6f

    • SHA256

      b1edf93f350e09878c5f114256f5f58e0d3f1b8f14e2cadfa28ea1f21798cabf

    • SHA512

      be90b15f4586e22dbf7f1b16da142caa990f1f20677b865efa849421c7a462e9bb4264f9e39f6c5049c61b51d739c7cabaa5bc9f1e819bb672e15d62b5e0a947

    • SSDEEP

      24576:zMzzk5YwWv7RB4cXO1NcUSa5mrAW+Rl2+Gxo+tYu6or:zZiCjnmFUl2+K8u6s

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks