General
-
Target
3c742f30186ec7a426c6e542396aca90_JaffaCakes118
-
Size
55KB
-
Sample
240712-h6dlkswclf
-
MD5
3c742f30186ec7a426c6e542396aca90
-
SHA1
cfab18b937c5f98f9ce6d9c4c4b668603c7514f6
-
SHA256
9bee6837664200171c2b2949fbc4b0518358bbfebac622cea5f25cf4742dab19
-
SHA512
0fc9c1c307692af545e2f8b5c8c524a408da3a0142f36c2db7b8b2fc465ee43cfa024df8d00e2093c0c48c9d1ab18e0b45147bc8b86c3f1204f4a9938909ebeb
-
SSDEEP
768:PxGU0EFrLa7Dl8Dljw4szpldYTL7eO7F+33j3mxtFOg:PGd8odYTHeyF+3qwg
Malware Config
Targets
-
-
Target
3c742f30186ec7a426c6e542396aca90_JaffaCakes118
-
Size
55KB
-
MD5
3c742f30186ec7a426c6e542396aca90
-
SHA1
cfab18b937c5f98f9ce6d9c4c4b668603c7514f6
-
SHA256
9bee6837664200171c2b2949fbc4b0518358bbfebac622cea5f25cf4742dab19
-
SHA512
0fc9c1c307692af545e2f8b5c8c524a408da3a0142f36c2db7b8b2fc465ee43cfa024df8d00e2093c0c48c9d1ab18e0b45147bc8b86c3f1204f4a9938909ebeb
-
SSDEEP
768:PxGU0EFrLa7Dl8Dljw4szpldYTL7eO7F+33j3mxtFOg:PGd8odYTHeyF+3qwg
Score7/10-
Reads data files stored by FTP clients
Tries to access configuration files associated with programs like FileZilla.
-
Reads local data of messenger clients
Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-