General

  • Target

    a4037dda1aad8d82302432494138e78c_JaffaCakes118

  • Size

    280KB

  • Sample

    240613-f9pf5swbqh

  • MD5

    a4037dda1aad8d82302432494138e78c

  • SHA1

    ca045de7fab549c79e1e1e3c48ba2fe33cfb4857

  • SHA256

    08da1d097d297560ed111a13e1bf61938eb272f4bfc16bd7a666e405844376ea

  • SHA512

    8f53fba6ee27539ace4a09200c73c266527226832caf15e0e5fe064c70f6ae016783cbf567bae450c5f5a258e8d011d283db0eafa911db08e76105ff51023615

  • SSDEEP

    6144:UA8MEFRVTYFMA0zrsJ6EZfYYvizJ2e0zT0IYE:H/EDVs1Uw4YEz0P0DE

Malware Config

Targets

    • Target

      a4037dda1aad8d82302432494138e78c_JaffaCakes118

    • Size

      280KB

    • MD5

      a4037dda1aad8d82302432494138e78c

    • SHA1

      ca045de7fab549c79e1e1e3c48ba2fe33cfb4857

    • SHA256

      08da1d097d297560ed111a13e1bf61938eb272f4bfc16bd7a666e405844376ea

    • SHA512

      8f53fba6ee27539ace4a09200c73c266527226832caf15e0e5fe064c70f6ae016783cbf567bae450c5f5a258e8d011d283db0eafa911db08e76105ff51023615

    • SSDEEP

      6144:UA8MEFRVTYFMA0zrsJ6EZfYYvizJ2e0zT0IYE:H/EDVs1Uw4YEz0P0DE

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

4
T1552

Credentials In Files

3
T1552.001

Credentials in Registry

1
T1552.002

Collection

Data from Local System

4
T1005

Email Collection

1
T1114

Tasks