General

  • Target

    9123f76f8eea0532caaf7f688a648ad8_JaffaCakes118

  • Size

    45KB

  • Sample

    240603-kgq7gsae56

  • MD5

    9123f76f8eea0532caaf7f688a648ad8

  • SHA1

    f7baa0fde28b0e144539ceb0ffcace0563720971

  • SHA256

    3bad41bc9d62f8f77adb5907196afbcd6255d3fd731cdbf35817ce3243cf5b8f

  • SHA512

    32844f6038ee5ff5088f0f184deb318bbc8fac41e92540b0756653942ca322f8b81395d745da958164c74fe32dd8db226a2e0274147a268e2f781f78ee120c12

  • SSDEEP

    768:ccBR6PwZ7UFRZa9R0wHuOviewu6gOTXx7xTDkh6W0rt5fLB8J6aL0vBYHiNG0TB:oEwu6gOzxNS6W0rtdB8JruBYHiG0F

Malware Config

Targets

    • Target

      9123f76f8eea0532caaf7f688a648ad8_JaffaCakes118

    • Size

      45KB

    • MD5

      9123f76f8eea0532caaf7f688a648ad8

    • SHA1

      f7baa0fde28b0e144539ceb0ffcace0563720971

    • SHA256

      3bad41bc9d62f8f77adb5907196afbcd6255d3fd731cdbf35817ce3243cf5b8f

    • SHA512

      32844f6038ee5ff5088f0f184deb318bbc8fac41e92540b0756653942ca322f8b81395d745da958164c74fe32dd8db226a2e0274147a268e2f781f78ee120c12

    • SSDEEP

      768:ccBR6PwZ7UFRZa9R0wHuOviewu6gOTXx7xTDkh6W0rt5fLB8J6aL0vBYHiNG0TB:oEwu6gOzxNS6W0rtdB8JruBYHiG0F

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks