General

  • Target

    013c077df9ff0c8dcf041083441dac5d_JaffaCakes118

  • Size

    533KB

  • Sample

    240930-pbwl8syejh

  • MD5

    013c077df9ff0c8dcf041083441dac5d

  • SHA1

    a661e12b6275683fa0503ef609d5482c9e5ff51a

  • SHA256

    649d972a157a578daef0d1dc3cd12ca39652a07bdb0992fcc9005c84a8ac547d

  • SHA512

    2000a78e4b42c153b74deed30b4de0cde002567a7cf00c2b12c1e7a2dc99850c0e46b299e1649880faa1bda2f0e27cfe7dd3869b41002e42940fa48288ae882c

  • SSDEEP

    12288:Vn0WLpdmP7+ZZM8SXIWrhYUVNUnmiMMO:S+pOy6zXYUVNUnzMMO

Malware Config

Targets

    • Target

      013c077df9ff0c8dcf041083441dac5d_JaffaCakes118

    • Size

      533KB

    • MD5

      013c077df9ff0c8dcf041083441dac5d

    • SHA1

      a661e12b6275683fa0503ef609d5482c9e5ff51a

    • SHA256

      649d972a157a578daef0d1dc3cd12ca39652a07bdb0992fcc9005c84a8ac547d

    • SHA512

      2000a78e4b42c153b74deed30b4de0cde002567a7cf00c2b12c1e7a2dc99850c0e46b299e1649880faa1bda2f0e27cfe7dd3869b41002e42940fa48288ae882c

    • SSDEEP

      12288:Vn0WLpdmP7+ZZM8SXIWrhYUVNUnmiMMO:S+pOy6zXYUVNUnzMMO

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks