General
-
Target
70ac79a9e2faedffc9cba459a12b17f6_JaffaCakes118
-
Size
87KB
-
Sample
240725-wqjdsawanl
-
MD5
70ac79a9e2faedffc9cba459a12b17f6
-
SHA1
877dc1f2f41bbd70f4a8baa2a6604015b85d0b55
-
SHA256
f221d50563126f2f99c0e434507a856829c791c1560ad1c90079d0162039671c
-
SHA512
d8ab4165cc33f2c4b01861242fd4e5ce2d60bc17e6e84375c12e92d744495846386fe4d1e6ce54fd01d359b5ea29402bf57dac17bb864c8c148fd59bcc99c900
-
SSDEEP
1536:nQ93/HQuBx4kjo2n/wFBzW4M25vYpNsU6HNLSuW5GzEEPjd/Kz9iSTleKuVNtG:urBPjo2n/wu4MIvYpNsnHNLCK5/
Static task
static1
Behavioral task
behavioral1
Sample
70ac79a9e2faedffc9cba459a12b17f6_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Targets
-
-
Target
70ac79a9e2faedffc9cba459a12b17f6_JaffaCakes118
-
Size
87KB
-
MD5
70ac79a9e2faedffc9cba459a12b17f6
-
SHA1
877dc1f2f41bbd70f4a8baa2a6604015b85d0b55
-
SHA256
f221d50563126f2f99c0e434507a856829c791c1560ad1c90079d0162039671c
-
SHA512
d8ab4165cc33f2c4b01861242fd4e5ce2d60bc17e6e84375c12e92d744495846386fe4d1e6ce54fd01d359b5ea29402bf57dac17bb864c8c148fd59bcc99c900
-
SSDEEP
1536:nQ93/HQuBx4kjo2n/wFBzW4M25vYpNsU6HNLSuW5GzEEPjd/Kz9iSTleKuVNtG:urBPjo2n/wu4MIvYpNsnHNLCK5/
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-