General

  • Target

    0f2ec0ceb2d4d98503802563581cb8cb_JaffaCakes118

  • Size

    587KB

  • Sample

    241003-rzbcbatenc

  • MD5

    0f2ec0ceb2d4d98503802563581cb8cb

  • SHA1

    6cd0a0c4b2253966164a3dd31c4e24139bd5955c

  • SHA256

    91744d7144839d4399efcb7a16598429b8c81b24c5a10b0690db8bfc2ebaba6e

  • SHA512

    171cc8ed621da8e5ee77c08ad78b670491b6a1a898bf3cced9c73c95d108b49b63cee3e6f4447ac22bb0d7daa21a9373e901c05cddb97605ddbe5a86f58a797c

  • SSDEEP

    12288:3Zm+I7EoPUN0ez7DYeYsBULfXAxMq/DwJJcad2LLf7v:JmxEZDPYB6v/DCcadO77v

Malware Config

Targets

    • Target

      0f2ec0ceb2d4d98503802563581cb8cb_JaffaCakes118

    • Size

      587KB

    • MD5

      0f2ec0ceb2d4d98503802563581cb8cb

    • SHA1

      6cd0a0c4b2253966164a3dd31c4e24139bd5955c

    • SHA256

      91744d7144839d4399efcb7a16598429b8c81b24c5a10b0690db8bfc2ebaba6e

    • SHA512

      171cc8ed621da8e5ee77c08ad78b670491b6a1a898bf3cced9c73c95d108b49b63cee3e6f4447ac22bb0d7daa21a9373e901c05cddb97605ddbe5a86f58a797c

    • SSDEEP

      12288:3Zm+I7EoPUN0ez7DYeYsBULfXAxMq/DwJJcad2LLf7v:JmxEZDPYB6v/DCcadO77v

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks