General

  • Target

    5b2ee09485d09d142a0f0f60b0ae51dd_JaffaCakes118

  • Size

    303KB

  • Sample

    240519-ypxwwsfa98

  • MD5

    5b2ee09485d09d142a0f0f60b0ae51dd

  • SHA1

    27cf934e42aefbfdefe503d6bc14e933a7e6e495

  • SHA256

    1192fc5f4230e845f86d5c940e7934ff2acbec9bf14a7a26b295e1c70be34e38

  • SHA512

    4f168c6a45bab43223a392fde2a4f57fae00ab2a45380b4a79cb46a58895a6abd7d2fe8c3d3a71049dbfa53e2cd6500d35d7ed17ec129502b88436420e4bb487

  • SSDEEP

    6144:VGHw77b1Ru6kKPeziQvUVbRq8ZRBZCi/Sz4t1jLZRLOZHqEJ2lf2etRVx4:cHw3b18Omu79FRr/S4t1jFhOZKEoVb4

Malware Config

Targets

    • Target

      5b2ee09485d09d142a0f0f60b0ae51dd_JaffaCakes118

    • Size

      303KB

    • MD5

      5b2ee09485d09d142a0f0f60b0ae51dd

    • SHA1

      27cf934e42aefbfdefe503d6bc14e933a7e6e495

    • SHA256

      1192fc5f4230e845f86d5c940e7934ff2acbec9bf14a7a26b295e1c70be34e38

    • SHA512

      4f168c6a45bab43223a392fde2a4f57fae00ab2a45380b4a79cb46a58895a6abd7d2fe8c3d3a71049dbfa53e2cd6500d35d7ed17ec129502b88436420e4bb487

    • SSDEEP

      6144:VGHw77b1Ru6kKPeziQvUVbRq8ZRBZCi/Sz4t1jLZRLOZHqEJ2lf2etRVx4:cHw3b18Omu79FRr/S4t1jFhOZKEoVb4

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks