General

  • Target

    b36a1eea69fa9804a746797cb17c1940_JaffaCakes118

  • Size

    42KB

  • Sample

    240821-petl2s1enp

  • MD5

    b36a1eea69fa9804a746797cb17c1940

  • SHA1

    92b034d412bf9526a8ef63a7dce2f2192287e9ce

  • SHA256

    fee78832acece65ca3f72d13a8717737121225fa15ec5108e49748367bd5d284

  • SHA512

    7793b1eb6b77f7eb30666157e62dc7d1f1b37aa28736e39829ff631cdb1f78c2e955e6a3bb3d265db4135ca57131c863f9306a010879d4dcede3d714910702db

  • SSDEEP

    768:j1Eiwm6XE7eA3KvInnuSQ+Gy+AYYvCPjxYin2GvM+Vh/jtM8Azsq+IXnnnnnnnnw:xEPm6XE7eALNQrGHvCPjx9zUI

Malware Config

Targets

    • Target

      b36a1eea69fa9804a746797cb17c1940_JaffaCakes118

    • Size

      42KB

    • MD5

      b36a1eea69fa9804a746797cb17c1940

    • SHA1

      92b034d412bf9526a8ef63a7dce2f2192287e9ce

    • SHA256

      fee78832acece65ca3f72d13a8717737121225fa15ec5108e49748367bd5d284

    • SHA512

      7793b1eb6b77f7eb30666157e62dc7d1f1b37aa28736e39829ff631cdb1f78c2e955e6a3bb3d265db4135ca57131c863f9306a010879d4dcede3d714910702db

    • SSDEEP

      768:j1Eiwm6XE7eA3KvInnuSQ+Gy+AYYvCPjxYin2GvM+Vh/jtM8Azsq+IXnnnnnnnnw:xEPm6XE7eALNQrGHvCPjx9zUI

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks