General
-
Target
cc4e4947dbf30c94a8e0613f7079b04d_JaffaCakes118
-
Size
256KB
-
Sample
240831-ga4x8aybqe
-
MD5
cc4e4947dbf30c94a8e0613f7079b04d
-
SHA1
06aaaec0cf89c1a63018f4f8ac41fc087f50296d
-
SHA256
53828926c375be5a7f6ec3bb0e535e30312f0cd3ca28089f6447c08e0aaaee1f
-
SHA512
7838ac0a03084010bdaca92f4b5d794bb2cb35c076a46cc64fe3ca49b345ed05131e969621cc8173df55f7d9986a138217dd521145310e8d8631fe1180c8708d
-
SSDEEP
6144:iz63Iv8CkSxq4zc2cp4OEV2DcW3swsVqT:lhSxVIVEIkU
Static task
static1
Behavioral task
behavioral1
Sample
cc4e4947dbf30c94a8e0613f7079b04d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cc4e4947dbf30c94a8e0613f7079b04d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
oski
hanxlas.ac.ug
Targets
-
-
Target
cc4e4947dbf30c94a8e0613f7079b04d_JaffaCakes118
-
Size
256KB
-
MD5
cc4e4947dbf30c94a8e0613f7079b04d
-
SHA1
06aaaec0cf89c1a63018f4f8ac41fc087f50296d
-
SHA256
53828926c375be5a7f6ec3bb0e535e30312f0cd3ca28089f6447c08e0aaaee1f
-
SHA512
7838ac0a03084010bdaca92f4b5d794bb2cb35c076a46cc64fe3ca49b345ed05131e969621cc8173df55f7d9986a138217dd521145310e8d8631fe1180c8708d
-
SSDEEP
6144:iz63Iv8CkSxq4zc2cp4OEV2DcW3swsVqT:lhSxVIVEIkU
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Suspicious use of SetThreadContext
-