General

  • Target

    ef0932ea355f43984c3bc73d827b9dbe_JaffaCakes118

  • Size

    568KB

  • Sample

    240921-enmvravakj

  • MD5

    ef0932ea355f43984c3bc73d827b9dbe

  • SHA1

    47d8c8c8818784a77ea8786ac17b9fbe18b02299

  • SHA256

    5df39eb6466bb41dc6e9c12162b8bd96e33ae6b2a430efe2a65b7e1e00b6ff5c

  • SHA512

    a94c3cb19095e781737d60a2829ceb88d9432617b6627112cfc53934c9ca274b1e26ec227c8712f72425733976ca705e5ac2192cc52c819abfad18d50d426910

  • SSDEEP

    12288:D4iLwBRU4Kue47ylrAbewyyXSRK8jE/rRYDju:D4iLYUfuileewyyB8AjRYDju

Malware Config

Targets

    • Target

      ef0932ea355f43984c3bc73d827b9dbe_JaffaCakes118

    • Size

      568KB

    • MD5

      ef0932ea355f43984c3bc73d827b9dbe

    • SHA1

      47d8c8c8818784a77ea8786ac17b9fbe18b02299

    • SHA256

      5df39eb6466bb41dc6e9c12162b8bd96e33ae6b2a430efe2a65b7e1e00b6ff5c

    • SHA512

      a94c3cb19095e781737d60a2829ceb88d9432617b6627112cfc53934c9ca274b1e26ec227c8712f72425733976ca705e5ac2192cc52c819abfad18d50d426910

    • SSDEEP

      12288:D4iLwBRU4Kue47ylrAbewyyXSRK8jE/rRYDju:D4iLYUfuileewyyB8AjRYDju

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks