General
-
Target
58b6853f6527b82da10be0ebf27a92d2_JaffaCakes118
-
Size
93KB
-
Sample
240729-w93lrsyaqb
-
MD5
58b6853f6527b82da10be0ebf27a92d2
-
SHA1
1a29c5fec5e0962752207c57a8fdf9f7f57c2eee
-
SHA256
5588a855473d3ed87a0dc2f2f6427e3e55b238e2a703580ce921a7efa68b0f1d
-
SHA512
5d075ba6a07fa2415ca405fd4d52cb4fa857a82c7eb36c7f40f279fe4f7a27b31f239fe29bcf41bba89bf3a1a4aa9123fb2cfddded34c2ddd2c0585684051f76
-
SSDEEP
1536:9Dh0WoaQ0WytVd4wQdWpCoQVGmkHENMQ4UgDkOQWTI1S4eeAKJrnR5TMerNkxkp:x65aQ0XtD4FsCxGmdMQ+DlFiqKhge5kS
Static task
static1
Behavioral task
behavioral1
Sample
58b6853f6527b82da10be0ebf27a92d2_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
58b6853f6527b82da10be0ebf27a92d2_JaffaCakes118
-
Size
93KB
-
MD5
58b6853f6527b82da10be0ebf27a92d2
-
SHA1
1a29c5fec5e0962752207c57a8fdf9f7f57c2eee
-
SHA256
5588a855473d3ed87a0dc2f2f6427e3e55b238e2a703580ce921a7efa68b0f1d
-
SHA512
5d075ba6a07fa2415ca405fd4d52cb4fa857a82c7eb36c7f40f279fe4f7a27b31f239fe29bcf41bba89bf3a1a4aa9123fb2cfddded34c2ddd2c0585684051f76
-
SSDEEP
1536:9Dh0WoaQ0WytVd4wQdWpCoQVGmkHENMQ4UgDkOQWTI1S4eeAKJrnR5TMerNkxkp:x65aQ0XtD4FsCxGmdMQ+DlFiqKhge5kS
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-