General

  • Target

    13aa22421308808eca06fe4e3e3f739c_JaffaCakes118

  • Size

    568KB

  • Sample

    241004-rfkfwayakr

  • MD5

    13aa22421308808eca06fe4e3e3f739c

  • SHA1

    d347101589e4a21af7eab4d4293307c0106ba3e4

  • SHA256

    f17eebb35a6f2de4a45342d679b55ed0878f1f427629e4fb0e8cf96a3d9f0d3b

  • SHA512

    98df20d6c4a259e417cf33776a10737543735e4286fa4daa794908843527ccbc813a5c19e52466181e6d6e787d03ce420f380db66547abb841a1c5e72e7bc053

  • SSDEEP

    12288:M4iLwBRU4Kue47ylrAbewyyXSRK8jE/rRYDju:M4iLYUfuileewyyB8AjRYDju

Malware Config

Targets

    • Target

      13aa22421308808eca06fe4e3e3f739c_JaffaCakes118

    • Size

      568KB

    • MD5

      13aa22421308808eca06fe4e3e3f739c

    • SHA1

      d347101589e4a21af7eab4d4293307c0106ba3e4

    • SHA256

      f17eebb35a6f2de4a45342d679b55ed0878f1f427629e4fb0e8cf96a3d9f0d3b

    • SHA512

      98df20d6c4a259e417cf33776a10737543735e4286fa4daa794908843527ccbc813a5c19e52466181e6d6e787d03ce420f380db66547abb841a1c5e72e7bc053

    • SSDEEP

      12288:M4iLwBRU4Kue47ylrAbewyyXSRK8jE/rRYDju:M4iLYUfuileewyyB8AjRYDju

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks