General
-
Target
270840e836204b40a73d02def6f4c56f_JaffaCakes118
-
Size
795KB
-
Sample
240705-txn7hatgja
-
MD5
270840e836204b40a73d02def6f4c56f
-
SHA1
b700cf3d987dd8ef75013696dbd515638abc06e3
-
SHA256
5643e6693519b9e54451e446dd319c1f8a52e045c9a24eb7b901b894d2d5d6f8
-
SHA512
87a9c380f4746f02d1d36ae33ccce9fab0a03503cf259ca8557c8761bbbd163e4999486e9e4918468fe1ee7c1bbbafa3cf6346a10254be50d5ce5010abb89184
-
SSDEEP
24576:xRM7VN/c99hAzj60BFueyeNWNR3kl/B9ifL3Tj1W3H:xRM7VRc9DAzjJFubeNeRk/B9ifj1w
Malware Config
Targets
-
-
Target
270840e836204b40a73d02def6f4c56f_JaffaCakes118
-
Size
795KB
-
MD5
270840e836204b40a73d02def6f4c56f
-
SHA1
b700cf3d987dd8ef75013696dbd515638abc06e3
-
SHA256
5643e6693519b9e54451e446dd319c1f8a52e045c9a24eb7b901b894d2d5d6f8
-
SHA512
87a9c380f4746f02d1d36ae33ccce9fab0a03503cf259ca8557c8761bbbd163e4999486e9e4918468fe1ee7c1bbbafa3cf6346a10254be50d5ce5010abb89184
-
SSDEEP
24576:xRM7VN/c99hAzj60BFueyeNWNR3kl/B9ifL3Tj1W3H:xRM7VRc9DAzjJFubeNeRk/B9ifj1w
Score7/10-
Reads WinSCP keys stored on the system
Tries to access WinSCP stored sessions.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-