General
-
Target
f0396d0e2c4ab1031dce598633c4e763_JaffaCakes118
-
Size
636KB
-
Sample
240921-va5fmsseph
-
MD5
f0396d0e2c4ab1031dce598633c4e763
-
SHA1
d47381d10917162b2f4293e7360faff2efa2afe7
-
SHA256
88e698ae3ec192e3af7d60cdc9afa7e22cdd2e5a412cec1b1051dc94e4d2a5ef
-
SHA512
73480b1842e2b5106b951ccc66b324cad87a2c7677d162c9177ce4bb95559070b6645fb53b81bb170c48a6174b36104bfa233417ece91c281b75f8dba74fac04
-
SSDEEP
12288:6xAeFV4TULyn6WjrUpDLeswTzKuQ0Snf2ulV65CVJqP5:6D4T6ArU5Lo6Ou+uJqx
Static task
static1
Behavioral task
behavioral1
Sample
f0396d0e2c4ab1031dce598633c4e763_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f0396d0e2c4ab1031dce598633c4e763_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f0396d0e2c4ab1031dce598633c4e763_JaffaCakes118
-
Size
636KB
-
MD5
f0396d0e2c4ab1031dce598633c4e763
-
SHA1
d47381d10917162b2f4293e7360faff2efa2afe7
-
SHA256
88e698ae3ec192e3af7d60cdc9afa7e22cdd2e5a412cec1b1051dc94e4d2a5ef
-
SHA512
73480b1842e2b5106b951ccc66b324cad87a2c7677d162c9177ce4bb95559070b6645fb53b81bb170c48a6174b36104bfa233417ece91c281b75f8dba74fac04
-
SSDEEP
12288:6xAeFV4TULyn6WjrUpDLeswTzKuQ0Snf2ulV65CVJqP5:6D4T6ArU5Lo6Ou+uJqx
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
2Credentials from Web Browsers
1Windows Credential Manager
1Unsecured Credentials
1Credentials In Files
1