General

  • Target

    319de18d45dde89cf373af8e0e4f290c_JaffaCakes118

  • Size

    755KB

  • Sample

    240709-xt9ktazfrj

  • MD5

    319de18d45dde89cf373af8e0e4f290c

  • SHA1

    5bd7543dc5bce4d6bbb2e1e43f9341776a7d06c4

  • SHA256

    639553928fb304a3d699f353a366179177ee89bc720a1da8146fafe6b32eb4ed

  • SHA512

    0ce52f69f2a75275d9bba0ae37d342437ddd5b13a6ff8b17ac0e18b6e60d5b147a896664e1ed7d2603e854922995a1be5d9eef4dc7faf91ffba13ea25cee9e6f

  • SSDEEP

    12288:MfiOhf5U2O2GPu/6CA2FhDGOMELo6rQtQCUxlhgevj0eXa:MfiOhxpGPu/6CAmliEs6r2Q9PTa

Malware Config

Targets

    • Target

      319de18d45dde89cf373af8e0e4f290c_JaffaCakes118

    • Size

      755KB

    • MD5

      319de18d45dde89cf373af8e0e4f290c

    • SHA1

      5bd7543dc5bce4d6bbb2e1e43f9341776a7d06c4

    • SHA256

      639553928fb304a3d699f353a366179177ee89bc720a1da8146fafe6b32eb4ed

    • SHA512

      0ce52f69f2a75275d9bba0ae37d342437ddd5b13a6ff8b17ac0e18b6e60d5b147a896664e1ed7d2603e854922995a1be5d9eef4dc7faf91ffba13ea25cee9e6f

    • SSDEEP

      12288:MfiOhf5U2O2GPu/6CA2FhDGOMELo6rQtQCUxlhgevj0eXa:MfiOhxpGPu/6CAmliEs6r2Q9PTa

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks