General

  • Target

    8688c8001e80e784a5650fd97a3af2d2_JaffaCakes118

  • Size

    478KB

  • Sample

    240810-sf4eesvbpn

  • MD5

    8688c8001e80e784a5650fd97a3af2d2

  • SHA1

    bd3bc08616cfc4aeb2f79cd748b15dc1f60efcf1

  • SHA256

    37b7239bc8fefa2120540728f6b9a90db0d25e1c4088808691888c9a120fd493

  • SHA512

    e73791c1eeb73522cb255107c73766bff258166e2271493dd6910c3af18092c5cfa062e44c071e5d730b600205117795cf2ccde89a585d1e3dcad1591f8c5f51

  • SSDEEP

    12288:c1pkfKb2DpcIDFtHE5AyemS12o1kBtZ8MM0wK:cmKyDpcqWW0S12eotZ8MM0wK

Malware Config

Targets

    • Target

      8688c8001e80e784a5650fd97a3af2d2_JaffaCakes118

    • Size

      478KB

    • MD5

      8688c8001e80e784a5650fd97a3af2d2

    • SHA1

      bd3bc08616cfc4aeb2f79cd748b15dc1f60efcf1

    • SHA256

      37b7239bc8fefa2120540728f6b9a90db0d25e1c4088808691888c9a120fd493

    • SHA512

      e73791c1eeb73522cb255107c73766bff258166e2271493dd6910c3af18092c5cfa062e44c071e5d730b600205117795cf2ccde89a585d1e3dcad1591f8c5f51

    • SSDEEP

      12288:c1pkfKb2DpcIDFtHE5AyemS12o1kBtZ8MM0wK:cmKyDpcqWW0S12eotZ8MM0wK

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks