General

  • Target

    ea7e6c59e3462d71529e9419819d2303_JaffaCakes118

  • Size

    3.2MB

  • Sample

    240919-dxr1dsybqb

  • MD5

    ea7e6c59e3462d71529e9419819d2303

  • SHA1

    64e3a058b3ed80f4eed58d48946a985665f4f2fa

  • SHA256

    75782095df088521c63ab0a0530cd2bdbc31e14948f11daaab093b7599dfef67

  • SHA512

    30c8fc486ea30d180e5c9b677a34922f7d48292bccc004a7f10e2bc0d4cf6136e9dc61770f777ac07f847e4c739e5c3651a00b684daeba683367a26c8431a448

  • SSDEEP

    49152:Vf6QfhxQzZYwbLZ0CQT27kP/eF3TRTMyDJOGJqT5+GP:VLAzZYwbGCQT24P/ARDt

Malware Config

Targets

    • Target

      ea7e6c59e3462d71529e9419819d2303_JaffaCakes118

    • Size

      3.2MB

    • MD5

      ea7e6c59e3462d71529e9419819d2303

    • SHA1

      64e3a058b3ed80f4eed58d48946a985665f4f2fa

    • SHA256

      75782095df088521c63ab0a0530cd2bdbc31e14948f11daaab093b7599dfef67

    • SHA512

      30c8fc486ea30d180e5c9b677a34922f7d48292bccc004a7f10e2bc0d4cf6136e9dc61770f777ac07f847e4c739e5c3651a00b684daeba683367a26c8431a448

    • SSDEEP

      49152:Vf6QfhxQzZYwbLZ0CQT27kP/eF3TRTMyDJOGJqT5+GP:VLAzZYwbGCQT24P/ARDt

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook accounts

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks