General

  • Target

    328f812edefcca6e794f97de6ecfc697_JaffaCakes118

  • Size

    636KB

  • Sample

    240710-ah1r7sweqf

  • MD5

    328f812edefcca6e794f97de6ecfc697

  • SHA1

    6827fea63b3e8ebf5d374cf3df644297910a5ec8

  • SHA256

    c651332b8a9b64868a53b73c4f04352aabb81d8702d2031ca12935e65e631bf8

  • SHA512

    0e67a9bb6ff5f3f8a160f41b985c02ac9e2e215847b8fe74e02d1ee3c8a678b41ac023523e49d742b081f8499ac1df7ced42cc9294971093ca1cbec84520d2bc

  • SSDEEP

    12288:CwQBI2ox0auZK248B7xIGJ3bGNacM+oz8JGuS4wLSlFd:CwAh60aiIM7x5xbMLom44wmF

Malware Config

Targets

    • Target

      328f812edefcca6e794f97de6ecfc697_JaffaCakes118

    • Size

      636KB

    • MD5

      328f812edefcca6e794f97de6ecfc697

    • SHA1

      6827fea63b3e8ebf5d374cf3df644297910a5ec8

    • SHA256

      c651332b8a9b64868a53b73c4f04352aabb81d8702d2031ca12935e65e631bf8

    • SHA512

      0e67a9bb6ff5f3f8a160f41b985c02ac9e2e215847b8fe74e02d1ee3c8a678b41ac023523e49d742b081f8499ac1df7ced42cc9294971093ca1cbec84520d2bc

    • SSDEEP

      12288:CwQBI2ox0auZK248B7xIGJ3bGNacM+oz8JGuS4wLSlFd:CwAh60aiIM7x5xbMLom44wmF

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks