General

  • Target

    0d844000dd9c2c81226cbe17a326e12d_JaffaCakes118

  • Size

    194KB

  • Sample

    240625-k9p5ws1cle

  • MD5

    0d844000dd9c2c81226cbe17a326e12d

  • SHA1

    711e74dc5b141d70a0fe37c83828ecb96a35e02f

  • SHA256

    278b45a3271969da3c4ccaf01561a5da13d65638f1efdd9ca425460048e8672e

  • SHA512

    e51d861a6495ce96fe55f635500878bb99177dfca48ec69210d84b943c45df2e2b26af15983497a27457776f7e3ae2354814a02022686566d9d0dee964ab031d

  • SSDEEP

    6144:Kvs0MAY7eo4pR6xO5fEve443ODMPuWSR:Kvro436xO5fR44mM

Malware Config

Targets

    • Target

      0d844000dd9c2c81226cbe17a326e12d_JaffaCakes118

    • Size

      194KB

    • MD5

      0d844000dd9c2c81226cbe17a326e12d

    • SHA1

      711e74dc5b141d70a0fe37c83828ecb96a35e02f

    • SHA256

      278b45a3271969da3c4ccaf01561a5da13d65638f1efdd9ca425460048e8672e

    • SHA512

      e51d861a6495ce96fe55f635500878bb99177dfca48ec69210d84b943c45df2e2b26af15983497a27457776f7e3ae2354814a02022686566d9d0dee964ab031d

    • SSDEEP

      6144:Kvs0MAY7eo4pR6xO5fEve443ODMPuWSR:Kvro436xO5fR44mM

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks