Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
11-07-2024 19:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3a6c3462ebe8ba7e45eac769d157bfcf_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
1 signatures
150 seconds
General
-
Target
3a6c3462ebe8ba7e45eac769d157bfcf_JaffaCakes118.exe
-
Size
36KB
-
MD5
3a6c3462ebe8ba7e45eac769d157bfcf
-
SHA1
63ff1d6a68764c39c66e0086aaa09343cef8bad4
-
SHA256
4abb277f325ca26e40ff0d62166d8c96d161b0f9cbd320c6550dbbeb58b18962
-
SHA512
522098db125e91f081fe25c029029da2840e1e48fca302a94047d553c311b3342fd94c488e166a7ebf4489ff1b555525d643730b794a8d5b828cdc7989af944b
-
SSDEEP
384:mdouHSxfzyqxfMLhgP8Dhc2lkME6Q2Z53QA++k8t6lb99NFK/o5Akby9da5:gouHEbyUfMLhg+hc2lkW1W992va5
Malware Config
Extracted
Credentials
Protocol: ftp- Host:
ren.aiq.ru - Port:
21 - Username:
u338434 - Password:
7uifudtk
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.