General

  • Target

    4fa92125f142c9482042ad2e16304a91_JaffaCakes118

  • Size

    5.6MB

  • Sample

    240716-xvv4tayerd

  • MD5

    4fa92125f142c9482042ad2e16304a91

  • SHA1

    b8e7bf37536a2b584353249a4477a1dee70a521d

  • SHA256

    32da299f99a55abadb05d2186aaf98fe698a355e621e3adfaca495bca1e72e49

  • SHA512

    97ed371a8578872c00569630a0a011dc9295857b4956dff48a76fcc53c14fc0fa5af5930796e57121bc7dd1e319d061572c2aa2a2ad2b05df723232ec45d351e

  • SSDEEP

    98304:tQ0w3+5DQOkuDBjTNvSxTEBvNFhgfBInGMcFepd7hPhz6osh3eyufC5FKId2nM1X:O0w3+5DDFjTNvvFsfYcspd7hJz8wyb51

Malware Config

Targets

    • Target

      4fa92125f142c9482042ad2e16304a91_JaffaCakes118

    • Size

      5.6MB

    • MD5

      4fa92125f142c9482042ad2e16304a91

    • SHA1

      b8e7bf37536a2b584353249a4477a1dee70a521d

    • SHA256

      32da299f99a55abadb05d2186aaf98fe698a355e621e3adfaca495bca1e72e49

    • SHA512

      97ed371a8578872c00569630a0a011dc9295857b4956dff48a76fcc53c14fc0fa5af5930796e57121bc7dd1e319d061572c2aa2a2ad2b05df723232ec45d351e

    • SSDEEP

      98304:tQ0w3+5DQOkuDBjTNvSxTEBvNFhgfBInGMcFepd7hPhz6osh3eyufC5FKId2nM1X:O0w3+5DDFjTNvvFsfYcspd7hJz8wyb51

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

    • Shurk Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks