General

  • Target

    790f5bda66f2f386bc790c5fed7c578d_JaffaCakes118

  • Size

    712KB

  • Sample

    240727-wmg2jsvepf

  • MD5

    790f5bda66f2f386bc790c5fed7c578d

  • SHA1

    a8ef627a9af16c095f8fc9f226a80981bf996f35

  • SHA256

    c24393ab79ee98442f658d00f3f261fbc468710270bfbc7575e9ad4d1d42a3fb

  • SHA512

    c73f6370d403ff2fd26a7ba7753077aefffae90858ed0044be0aa3f18703cac7fb3baa631ea1f7236dd43632120f00009045ffa6f955ebe3d27e417159893e41

  • SSDEEP

    12288:b/XM4DShe9EcHPLrLZ5AICgkTP3/s02DdN6:jM4DSs9FvzAICgkTODX

Malware Config

Targets

    • Target

      790f5bda66f2f386bc790c5fed7c578d_JaffaCakes118

    • Size

      712KB

    • MD5

      790f5bda66f2f386bc790c5fed7c578d

    • SHA1

      a8ef627a9af16c095f8fc9f226a80981bf996f35

    • SHA256

      c24393ab79ee98442f658d00f3f261fbc468710270bfbc7575e9ad4d1d42a3fb

    • SHA512

      c73f6370d403ff2fd26a7ba7753077aefffae90858ed0044be0aa3f18703cac7fb3baa631ea1f7236dd43632120f00009045ffa6f955ebe3d27e417159893e41

    • SSDEEP

      12288:b/XM4DShe9EcHPLrLZ5AICgkTP3/s02DdN6:jM4DSs9FvzAICgkTODX

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

MITRE ATT&CK Enterprise v15

Tasks