General
-
Target
aa2b241f96c8323289289e3af0daaff4_JaffaCakes118
-
Size
917KB
-
Sample
240819-jlq7lsvgpl
-
MD5
aa2b241f96c8323289289e3af0daaff4
-
SHA1
0bafbce79f4ae12f83b18fc887640fc55498d798
-
SHA256
27517e8eb4bdf5c343cc06ee9935f20a23c851ae3c426aa4efbe342ce2d50412
-
SHA512
a94b82090f1ddb206bcf36f28a86eebd5ca7fd6a535cea8d683dff29fedf3f68a40c77d5b3662114ec09e7ebf4937ad4ab0eab550521bc0456e947038a69c35a
-
SSDEEP
12288:YWZ+uXbIwAhbWUV6gLLke4srUOcjoTPhx3TOW6Q0DkZUoxRCg0dQfLV5iggXhdVD:YWZIwAF1rLLNvBHEW6H80Qf7bg9
Malware Config
Targets
-
-
Target
aa2b241f96c8323289289e3af0daaff4_JaffaCakes118
-
Size
917KB
-
MD5
aa2b241f96c8323289289e3af0daaff4
-
SHA1
0bafbce79f4ae12f83b18fc887640fc55498d798
-
SHA256
27517e8eb4bdf5c343cc06ee9935f20a23c851ae3c426aa4efbe342ce2d50412
-
SHA512
a94b82090f1ddb206bcf36f28a86eebd5ca7fd6a535cea8d683dff29fedf3f68a40c77d5b3662114ec09e7ebf4937ad4ab0eab550521bc0456e947038a69c35a
-
SSDEEP
12288:YWZ+uXbIwAhbWUV6gLLke4srUOcjoTPhx3TOW6Q0DkZUoxRCg0dQfLV5iggXhdVD:YWZIwAF1rLLNvBHEW6H80Qf7bg9
Score7/10-
Reads WinSCP keys stored on the system
Tries to access WinSCP stored sessions.
-
Reads data files stored by FTP clients
Tries to access configuration files associated with programs like FileZilla.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-