General

  • Target

    b58172ae005ff82ea6dbc18d4e0fc383_JaffaCakes118

  • Size

    536KB

  • Sample

    240821-3nvscsxakh

  • MD5

    b58172ae005ff82ea6dbc18d4e0fc383

  • SHA1

    59e60c0749d063f8dc3b6f2e20911955b6d5681e

  • SHA256

    1c9ec8dd3929fb1ac12624afa07e5dc3c7c36755abe98992a89b8361e0001d44

  • SHA512

    d578ea8e16ef54cd170e60d3c38708bce39216aa43a6c2a8e0cb3297d99325e2dc8374d1f9cd382d833575fbada03ac34f04ad0a7e248bd194d0812422e34d9c

  • SSDEEP

    12288:skwmrSeHxLzib69z4DiS9sknYTg0i7uuKcMMkJ:LCesb0zo7NYTg0ouutMMkJ

Malware Config

Targets

    • Target

      b58172ae005ff82ea6dbc18d4e0fc383_JaffaCakes118

    • Size

      536KB

    • MD5

      b58172ae005ff82ea6dbc18d4e0fc383

    • SHA1

      59e60c0749d063f8dc3b6f2e20911955b6d5681e

    • SHA256

      1c9ec8dd3929fb1ac12624afa07e5dc3c7c36755abe98992a89b8361e0001d44

    • SHA512

      d578ea8e16ef54cd170e60d3c38708bce39216aa43a6c2a8e0cb3297d99325e2dc8374d1f9cd382d833575fbada03ac34f04ad0a7e248bd194d0812422e34d9c

    • SSDEEP

      12288:skwmrSeHxLzib69z4DiS9sknYTg0i7uuKcMMkJ:LCesb0zo7NYTg0ouutMMkJ

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks