General
-
Target
ade694077a15ca8f8c2813509e359600_JaffaCakes118
-
Size
288KB
-
Sample
240820-fdhcysxfqr
-
MD5
ade694077a15ca8f8c2813509e359600
-
SHA1
59f48449c02591debc2dc176939a441123d2c978
-
SHA256
ac016ad4df2db0b76e890253bb5ff93d9a451818139f2ecfb500b5e267939f03
-
SHA512
806402ac8ec9304e957cb44a851d9e7a88484a199202b871d7f565fd78fc06c018c89ca64b36b657e22115d5a368c004480e89569a8b6c284b592f2ac4d92eae
-
SSDEEP
6144:2w4qIcn4zUcu+9C/WQsFCIwKC7Xa7t4KPaXKDPLRpwG:2wWYcuZeSIhC7+t4KP4iLwG
Static task
static1
Behavioral task
behavioral1
Sample
ade694077a15ca8f8c2813509e359600_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ade694077a15ca8f8c2813509e359600_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ade694077a15ca8f8c2813509e359600_JaffaCakes118
-
Size
288KB
-
MD5
ade694077a15ca8f8c2813509e359600
-
SHA1
59f48449c02591debc2dc176939a441123d2c978
-
SHA256
ac016ad4df2db0b76e890253bb5ff93d9a451818139f2ecfb500b5e267939f03
-
SHA512
806402ac8ec9304e957cb44a851d9e7a88484a199202b871d7f565fd78fc06c018c89ca64b36b657e22115d5a368c004480e89569a8b6c284b592f2ac4d92eae
-
SSDEEP
6144:2w4qIcn4zUcu+9C/WQsFCIwKC7Xa7t4KPaXKDPLRpwG:2wWYcuZeSIhC7+t4KP4iLwG
-
ISR Stealer
ISR Stealer is a modified version of Hackhound Stealer written in visual basic.
-
ISR Stealer payload
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Suspicious use of SetThreadContext
-