General

  • Target

    73ebb9e42f5d4bf563582917b25eaa2b_JaffaCakes118

  • Size

    43KB

  • Sample

    240726-nxncbazakg

  • MD5

    73ebb9e42f5d4bf563582917b25eaa2b

  • SHA1

    666a81dbb385a14de415acafebe676c93c35f761

  • SHA256

    261096aa0e794e917a29686b9694d2a211d2624fc136d3351c11c0d8ad5ac551

  • SHA512

    4088315a16f8cecf8e8bf0d6635c37142bf12f48ccd24f429d2488ce53886afc0739bc0e7f6b1ccfd946c749949352f12adc6b83e813e606ecb858201aedcb80

  • SSDEEP

    768:a0hIjf+O8XCMl5FsWoPO6kIlaxLzKNqoCcuhbzMP:a0i7+O8XCw/oiIlaxMy5FzMP

Malware Config

Targets

    • Target

      73ebb9e42f5d4bf563582917b25eaa2b_JaffaCakes118

    • Size

      43KB

    • MD5

      73ebb9e42f5d4bf563582917b25eaa2b

    • SHA1

      666a81dbb385a14de415acafebe676c93c35f761

    • SHA256

      261096aa0e794e917a29686b9694d2a211d2624fc136d3351c11c0d8ad5ac551

    • SHA512

      4088315a16f8cecf8e8bf0d6635c37142bf12f48ccd24f429d2488ce53886afc0739bc0e7f6b1ccfd946c749949352f12adc6b83e813e606ecb858201aedcb80

    • SSDEEP

      768:a0hIjf+O8XCMl5FsWoPO6kIlaxLzKNqoCcuhbzMP:a0i7+O8XCw/oiIlaxMy5FzMP

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks