General

  • Target

    8c675a888d0a2281af8cb91cc8864e34_JaffaCakes118

  • Size

    181KB

  • Sample

    240811-3es76stgmr

  • MD5

    8c675a888d0a2281af8cb91cc8864e34

  • SHA1

    5ef4864f9b4d1a807195254124cfbddb94924491

  • SHA256

    13a7da4a12ea950b95d919828dde988a65a207bc27e6697b5803121456ad26ae

  • SHA512

    533376f7302bd8c236135396fea3e9e022ed64dbd8858d0ae36f2ca7171ec8ecea32b8b4a65b090f816ccce7aa0374790cde46f1c491a97b7b9736924659ddd1

  • SSDEEP

    3072:M1dt224kfBEac9MfAfddQNH26jQiO704yp2hh6R8pKi3NC+eDgCDdJ:uy2HEac9MfAFdQyf7P5h+8pp2Dvf

Malware Config

Targets

    • Target

      8c675a888d0a2281af8cb91cc8864e34_JaffaCakes118

    • Size

      181KB

    • MD5

      8c675a888d0a2281af8cb91cc8864e34

    • SHA1

      5ef4864f9b4d1a807195254124cfbddb94924491

    • SHA256

      13a7da4a12ea950b95d919828dde988a65a207bc27e6697b5803121456ad26ae

    • SHA512

      533376f7302bd8c236135396fea3e9e022ed64dbd8858d0ae36f2ca7171ec8ecea32b8b4a65b090f816ccce7aa0374790cde46f1c491a97b7b9736924659ddd1

    • SSDEEP

      3072:M1dt224kfBEac9MfAfddQNH26jQiO704yp2hh6R8pKi3NC+eDgCDdJ:uy2HEac9MfAFdQyf7P5h+8pp2Dvf

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks