General

  • Target

    6a41a65fa1c7299341a368d530adc7e4_JaffaCakes118

  • Size

    24KB

  • Sample

    240724-e7znnaybrl

  • MD5

    6a41a65fa1c7299341a368d530adc7e4

  • SHA1

    7f4ec8e469be4241a8f0120e28e0716fb070a689

  • SHA256

    fbd7a2daf15dcd5774b4c01f6f201d6c724d7ce2188f76914e822a7d469d1705

  • SHA512

    39381d2322801e0eb128dc54d1137e00f7eadc4f005143bf004f64fce9ce92c6deaebe6f98689cdd239a8abda9d3f3c303c46d38355de67e67747c21129665ad

  • SSDEEP

    768:KXc8GPU/tOMLnS56ETJJX66Kyprlmfl/OwJW:KXcLUPEJRRJlmfl/OJ

Malware Config

Targets

    • Target

      6a41a65fa1c7299341a368d530adc7e4_JaffaCakes118

    • Size

      24KB

    • MD5

      6a41a65fa1c7299341a368d530adc7e4

    • SHA1

      7f4ec8e469be4241a8f0120e28e0716fb070a689

    • SHA256

      fbd7a2daf15dcd5774b4c01f6f201d6c724d7ce2188f76914e822a7d469d1705

    • SHA512

      39381d2322801e0eb128dc54d1137e00f7eadc4f005143bf004f64fce9ce92c6deaebe6f98689cdd239a8abda9d3f3c303c46d38355de67e67747c21129665ad

    • SSDEEP

      768:KXc8GPU/tOMLnS56ETJJX66Kyprlmfl/OwJW:KXcLUPEJRRJlmfl/OJ

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks