General

  • Target

    03b5225a36bd8a59d24c2833f52517de_JaffaCakes118

  • Size

    28KB

  • Sample

    241001-adswss1elr

  • MD5

    03b5225a36bd8a59d24c2833f52517de

  • SHA1

    ba63316ce1689a883213ee57ce9f12f4c4d8b531

  • SHA256

    94fabaa0595c1f95135f0e7147f6c2a04dcf72b1041a1269bc74fbe0e2be835a

  • SHA512

    f3469ac71ea9a10861b9bddbcac3ed3673ffc6815b16ad76dcc67e00ce7bf8d5bc4d363e7296c20f10e8a6f0fcf733cd91cb1602f115e45abdb0cef80574e29c

  • SSDEEP

    768:e3fnrAzhLSowP9kpNxJiWEQk8uZm4N1ttM2zo:ePn0hLWm0QgHN/tM

Malware Config

Targets

    • Target

      03b5225a36bd8a59d24c2833f52517de_JaffaCakes118

    • Size

      28KB

    • MD5

      03b5225a36bd8a59d24c2833f52517de

    • SHA1

      ba63316ce1689a883213ee57ce9f12f4c4d8b531

    • SHA256

      94fabaa0595c1f95135f0e7147f6c2a04dcf72b1041a1269bc74fbe0e2be835a

    • SHA512

      f3469ac71ea9a10861b9bddbcac3ed3673ffc6815b16ad76dcc67e00ce7bf8d5bc4d363e7296c20f10e8a6f0fcf733cd91cb1602f115e45abdb0cef80574e29c

    • SSDEEP

      768:e3fnrAzhLSowP9kpNxJiWEQk8uZm4N1ttM2zo:ePn0hLWm0QgHN/tM

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks