General

  • Target

    8a8a44b1c68890113981009541e35321_JaffaCakes118

  • Size

    522KB

  • Sample

    240811-qq36as1flp

  • MD5

    8a8a44b1c68890113981009541e35321

  • SHA1

    3713927b2ad545dcecff12419247de98752cc8c2

  • SHA256

    1cb14ebfea69749676d346005a8c65ef8d7c3954ef931af7d9bd231b633e87e1

  • SHA512

    9a0a050bab86ea5576c46cd1acf123d8c204164a863d52c0aec12286298063ea5316a61264d3acdfc5e1cbdcc44a51918011b02738e6195edd06e60ad351a1ab

  • SSDEEP

    12288:PPABvdQ+0Z3+B1XubAG3ZHApruxNIBTkRmigNbbMM2:QBvdQW1XuX3ZHApSmFkRmicvMM2

Malware Config

Targets

    • Target

      8a8a44b1c68890113981009541e35321_JaffaCakes118

    • Size

      522KB

    • MD5

      8a8a44b1c68890113981009541e35321

    • SHA1

      3713927b2ad545dcecff12419247de98752cc8c2

    • SHA256

      1cb14ebfea69749676d346005a8c65ef8d7c3954ef931af7d9bd231b633e87e1

    • SHA512

      9a0a050bab86ea5576c46cd1acf123d8c204164a863d52c0aec12286298063ea5316a61264d3acdfc5e1cbdcc44a51918011b02738e6195edd06e60ad351a1ab

    • SSDEEP

      12288:PPABvdQ+0Z3+B1XubAG3ZHApruxNIBTkRmigNbbMM2:QBvdQW1XuX3ZHApSmFkRmicvMM2

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks