General

  • Target

    04c214891b4675a1b1377551b5d06879_JaffaCakes118

  • Size

    166KB

  • Sample

    240623-3y685ssfjk

  • MD5

    04c214891b4675a1b1377551b5d06879

  • SHA1

    d3e95be62405db2e3dac19286701d658b7d1ae0d

  • SHA256

    35647e4a73a5ba15a671783b6499023d51094fd088e09c59dd42b2e7f9225b83

  • SHA512

    80ffba2b6500247eafb39ee600b3a58340f9e72f4e0a09811cdeb1064166df9b7d5039030fe0544f07f952e943f7cd7834c722cce430cf299a3a5fb8517e093a

  • SSDEEP

    3072:lHmjLNF9utk0WVJTuZ3E6xPVDdyNysC+L/pSU/yJGbZbkSWeZgFOsl:4LNF4tk0WV1AE6NBd380Ynv9iF9

Malware Config

Targets

    • Target

      04c214891b4675a1b1377551b5d06879_JaffaCakes118

    • Size

      166KB

    • MD5

      04c214891b4675a1b1377551b5d06879

    • SHA1

      d3e95be62405db2e3dac19286701d658b7d1ae0d

    • SHA256

      35647e4a73a5ba15a671783b6499023d51094fd088e09c59dd42b2e7f9225b83

    • SHA512

      80ffba2b6500247eafb39ee600b3a58340f9e72f4e0a09811cdeb1064166df9b7d5039030fe0544f07f952e943f7cd7834c722cce430cf299a3a5fb8517e093a

    • SSDEEP

      3072:lHmjLNF9utk0WVJTuZ3E6xPVDdyNysC+L/pSU/yJGbZbkSWeZgFOsl:4LNF4tk0WV1AE6NBd380Ynv9iF9

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks