General

  • Target

    f0396d0e2c4ab1031dce598633c4e763_JaffaCakes118

  • Size

    636KB

  • Sample

    240921-va5fmsseph

  • MD5

    f0396d0e2c4ab1031dce598633c4e763

  • SHA1

    d47381d10917162b2f4293e7360faff2efa2afe7

  • SHA256

    88e698ae3ec192e3af7d60cdc9afa7e22cdd2e5a412cec1b1051dc94e4d2a5ef

  • SHA512

    73480b1842e2b5106b951ccc66b324cad87a2c7677d162c9177ce4bb95559070b6645fb53b81bb170c48a6174b36104bfa233417ece91c281b75f8dba74fac04

  • SSDEEP

    12288:6xAeFV4TULyn6WjrUpDLeswTzKuQ0Snf2ulV65CVJqP5:6D4T6ArU5Lo6Ou+uJqx

Malware Config

Targets

    • Target

      f0396d0e2c4ab1031dce598633c4e763_JaffaCakes118

    • Size

      636KB

    • MD5

      f0396d0e2c4ab1031dce598633c4e763

    • SHA1

      d47381d10917162b2f4293e7360faff2efa2afe7

    • SHA256

      88e698ae3ec192e3af7d60cdc9afa7e22cdd2e5a412cec1b1051dc94e4d2a5ef

    • SHA512

      73480b1842e2b5106b951ccc66b324cad87a2c7677d162c9177ce4bb95559070b6645fb53b81bb170c48a6174b36104bfa233417ece91c281b75f8dba74fac04

    • SSDEEP

      12288:6xAeFV4TULyn6WjrUpDLeswTzKuQ0Snf2ulV65CVJqP5:6D4T6ArU5Lo6Ou+uJqx

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Credentials from Password Stores: Windows Credential Manager

      Suspicious access to Credentials History.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks