General

  • Target

    6a00033258f0238ae0d551f730690ce6_JaffaCakes118

  • Size

    913KB

  • Sample

    240523-gzflxsgb2s

  • MD5

    6a00033258f0238ae0d551f730690ce6

  • SHA1

    243167691fe5e344f605bb318beefbc01c632332

  • SHA256

    10d8c92c49c753ba4aa9698b275c2e33ff86bb402a0c1158c081e1b54d171f75

  • SHA512

    2349c3473884823094230f78cd6543d090b37d256936ed3f3414ae142e6d71b51fa0443bfcad4db23061316b1d3a7d339fd78e451fa110e5924d5c0b04bac4d6

  • SSDEEP

    24576:T2oSaf5lTlufs3zjVpx1NsOG6/1mfWuBzT02xyJPy0p:T2oSaf5lTlufs3PVpx16cpEzTRgJa

Score
7/10

Malware Config

Targets

    • Target

      6a00033258f0238ae0d551f730690ce6_JaffaCakes118

    • Size

      913KB

    • MD5

      6a00033258f0238ae0d551f730690ce6

    • SHA1

      243167691fe5e344f605bb318beefbc01c632332

    • SHA256

      10d8c92c49c753ba4aa9698b275c2e33ff86bb402a0c1158c081e1b54d171f75

    • SHA512

      2349c3473884823094230f78cd6543d090b37d256936ed3f3414ae142e6d71b51fa0443bfcad4db23061316b1d3a7d339fd78e451fa110e5924d5c0b04bac4d6

    • SSDEEP

      24576:T2oSaf5lTlufs3zjVpx1NsOG6/1mfWuBzT02xyJPy0p:T2oSaf5lTlufs3PVpx16cpEzTRgJa

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

1
T1082

Collection

Data from Local System

1
T1005

Tasks