General

  • Target

    036802cc8264ada68b5ef9118139e9c0_JaffaCakes118

  • Size

    556KB

  • Sample

    240930-1vrm6sxblm

  • MD5

    036802cc8264ada68b5ef9118139e9c0

  • SHA1

    035090280424a893b8ce9496c318c37a64c33166

  • SHA256

    da9b6cf5ee541f24d5c1810fa815f9c24e9e7ffc52655931fea2cf37cf5e19a7

  • SHA512

    8c077c2d742eb6afd3cd0148b8d0d7980866b560c0aa89a0bfd9306b3d64246716d1f72ea9f331431ff4ba2199a2b0699609652fb4feb36e5ac99956f46cc058

  • SSDEEP

    12288:QGMVWEswD7o/Aoy51aISoO+YlyeU81GYOCmBmXHKwMMzk:QGSWEhnoIooSUY40G4imXHKwMMzk

Malware Config

Targets

    • Target

      036802cc8264ada68b5ef9118139e9c0_JaffaCakes118

    • Size

      556KB

    • MD5

      036802cc8264ada68b5ef9118139e9c0

    • SHA1

      035090280424a893b8ce9496c318c37a64c33166

    • SHA256

      da9b6cf5ee541f24d5c1810fa815f9c24e9e7ffc52655931fea2cf37cf5e19a7

    • SHA512

      8c077c2d742eb6afd3cd0148b8d0d7980866b560c0aa89a0bfd9306b3d64246716d1f72ea9f331431ff4ba2199a2b0699609652fb4feb36e5ac99956f46cc058

    • SSDEEP

      12288:QGMVWEswD7o/Aoy51aISoO+YlyeU81GYOCmBmXHKwMMzk:QGSWEhnoIooSUY40G4imXHKwMMzk

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks