General
-
Target
3ded5fed9e0870d0f33935f9a4982b59_JaffaCakes118
-
Size
814KB
-
Sample
240712-svwccs1hjb
-
MD5
3ded5fed9e0870d0f33935f9a4982b59
-
SHA1
53b9ffd6a3ab92eceb52edf96e3efebd7c487135
-
SHA256
acefe589d7d79d8ae4d62eedd81773affa2a3ff9dfffd90e89b583b5b5540684
-
SHA512
e837dd37c754da254d3173b96508d8b3ef2928141a78df4ef53dc8c7dd0579bdec9fdab5cc3bb35d778ac574d36e3c900fac74ac7b5d35127b61ab8a9e8eeeb0
-
SSDEEP
12288:GbaVqxwHDzxi8fj2JpSqUveX/cW1cUYofT3YOT+AFmp0N+xJ/VBoe5Jz:Gbzaxi+j27UmXkkcUZL7FmRXrz
Malware Config
Targets
-
-
Target
3ded5fed9e0870d0f33935f9a4982b59_JaffaCakes118
-
Size
814KB
-
MD5
3ded5fed9e0870d0f33935f9a4982b59
-
SHA1
53b9ffd6a3ab92eceb52edf96e3efebd7c487135
-
SHA256
acefe589d7d79d8ae4d62eedd81773affa2a3ff9dfffd90e89b583b5b5540684
-
SHA512
e837dd37c754da254d3173b96508d8b3ef2928141a78df4ef53dc8c7dd0579bdec9fdab5cc3bb35d778ac574d36e3c900fac74ac7b5d35127b61ab8a9e8eeeb0
-
SSDEEP
12288:GbaVqxwHDzxi8fj2JpSqUveX/cW1cUYofT3YOT+AFmp0N+xJ/VBoe5Jz:Gbzaxi+j27UmXkkcUZL7FmRXrz
Score7/10-
Reads WinSCP keys stored on the system
Tries to access WinSCP stored sessions.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-