General

  • Target

    3cb22fe3db50b6dd0c3a320aebf088ae_JaffaCakes118

  • Size

    208KB

  • Sample

    240712-kngavswdpl

  • MD5

    3cb22fe3db50b6dd0c3a320aebf088ae

  • SHA1

    5eed9086ca061308d35cd00aa0c740ca015718dc

  • SHA256

    7d29bd4796b006923aec9abd5f020adfb803d4e404d069da5b3cc7679d96a3e5

  • SHA512

    563c93f47890586d03a12f61f3827d7d4a5a822960b7455e3f48748fd26efab7457b7c79d2d594a93de612d05fc98c709252088788bec42b37e95e8f1e2343c7

  • SSDEEP

    6144:U3bdXPx3ldIKCC0ef//uXltKc+LVsz9b8:CldFeCXuLKcCVsz6

Malware Config

Targets

    • Target

      3cb22fe3db50b6dd0c3a320aebf088ae_JaffaCakes118

    • Size

      208KB

    • MD5

      3cb22fe3db50b6dd0c3a320aebf088ae

    • SHA1

      5eed9086ca061308d35cd00aa0c740ca015718dc

    • SHA256

      7d29bd4796b006923aec9abd5f020adfb803d4e404d069da5b3cc7679d96a3e5

    • SHA512

      563c93f47890586d03a12f61f3827d7d4a5a822960b7455e3f48748fd26efab7457b7c79d2d594a93de612d05fc98c709252088788bec42b37e95e8f1e2343c7

    • SSDEEP

      6144:U3bdXPx3ldIKCC0ef//uXltKc+LVsz9b8:CldFeCXuLKcCVsz6

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks