General

  • Target

    b6734bd7333f303038358dc9f2aa09b3_JaffaCakes118

  • Size

    43KB

  • Sample

    240822-frcdvstblk

  • MD5

    b6734bd7333f303038358dc9f2aa09b3

  • SHA1

    34b89e91f97d8f1b3267017ce68e02a0788cba90

  • SHA256

    a4432f87503e3adad4f2b1485102c6dfb54256530555cf9d49d1e65d82ca90f9

  • SHA512

    f935dc1577bd26a25194b38db7eb04c3b896c74f68eae2cf2c8a2476de240f920a8600169a69b60e07f38a23cc0c34fe8cd11d63c05913aec1c5728d0dee160a

  • SSDEEP

    768:Npv113MNh8S1yFJZQ5HlabYsfvVdWsu0HdgZnaxC9IN8KQyDsZF:NpvD3MN8FJZQ5HlcfdWsu0HdGaxC9K8P

Malware Config

Targets

    • Target

      b6734bd7333f303038358dc9f2aa09b3_JaffaCakes118

    • Size

      43KB

    • MD5

      b6734bd7333f303038358dc9f2aa09b3

    • SHA1

      34b89e91f97d8f1b3267017ce68e02a0788cba90

    • SHA256

      a4432f87503e3adad4f2b1485102c6dfb54256530555cf9d49d1e65d82ca90f9

    • SHA512

      f935dc1577bd26a25194b38db7eb04c3b896c74f68eae2cf2c8a2476de240f920a8600169a69b60e07f38a23cc0c34fe8cd11d63c05913aec1c5728d0dee160a

    • SSDEEP

      768:Npv113MNh8S1yFJZQ5HlabYsfvVdWsu0HdgZnaxC9IN8KQyDsZF:NpvD3MN8FJZQ5HlcfdWsu0HdGaxC9K8P

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks