General
-
Target
d72af6a6e2f222852f8dc6a8a846de13_JaffaCakes118
-
Size
891KB
-
Sample
240909-1x27paseml
-
MD5
d72af6a6e2f222852f8dc6a8a846de13
-
SHA1
79ab0f050d3d689fe126b6056d15a11dd71f93f3
-
SHA256
50b0c137a141fc6570e94ebb41ca65412a6799b7c68fcf3580ad3cf69a2f678d
-
SHA512
b948e4ae8475177d1b4edbafcd3de059dff173e89bfc0e351fe1ecea9c763b682ef2d6d065039b623829d0d55ba9937899cccf649e773fc9149038f3c670b8f4
-
SSDEEP
12288:cPEY8pGNJDVTwSGJLrbO1RzSJpQ98FufPaL3IhHAwBQ13O:4NzMSGJnbRXQW4HzBQR
Static task
static1
Behavioral task
behavioral1
Sample
d72af6a6e2f222852f8dc6a8a846de13_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d72af6a6e2f222852f8dc6a8a846de13_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d72af6a6e2f222852f8dc6a8a846de13_JaffaCakes118
-
Size
891KB
-
MD5
d72af6a6e2f222852f8dc6a8a846de13
-
SHA1
79ab0f050d3d689fe126b6056d15a11dd71f93f3
-
SHA256
50b0c137a141fc6570e94ebb41ca65412a6799b7c68fcf3580ad3cf69a2f678d
-
SHA512
b948e4ae8475177d1b4edbafcd3de059dff173e89bfc0e351fe1ecea9c763b682ef2d6d065039b623829d0d55ba9937899cccf649e773fc9149038f3c670b8f4
-
SSDEEP
12288:cPEY8pGNJDVTwSGJLrbO1RzSJpQ98FufPaL3IhHAwBQ13O:4NzMSGJnbRXQW4HzBQR
Score10/10-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-