General

  • Target

    25c632ec747a13389670859e75cec92d_JaffaCakes118

  • Size

    547KB

  • Sample

    241008-1ey3bayemm

  • MD5

    25c632ec747a13389670859e75cec92d

  • SHA1

    e038a04145b8a2dc39e513ec8b8d608873f77309

  • SHA256

    fcfd2a5e6aab9637f4ff453d1cf01ebd2efc52b5f683203b95595d2e552334f6

  • SHA512

    20d5a60d798910f8297fb283ced6359dcc31f719aba445b631f32c9ce6ad4e2b918f1c4d7ac86ce514665a0468c111e9774a7962958616ba32e199396c09bb94

  • SSDEEP

    12288:CiHI5w4UeCcMI+9aAcSncc8l9+2SrxdpC+7UMMMDl:C67WoxIornpCgvMMDl

Malware Config

Targets

    • Target

      25c632ec747a13389670859e75cec92d_JaffaCakes118

    • Size

      547KB

    • MD5

      25c632ec747a13389670859e75cec92d

    • SHA1

      e038a04145b8a2dc39e513ec8b8d608873f77309

    • SHA256

      fcfd2a5e6aab9637f4ff453d1cf01ebd2efc52b5f683203b95595d2e552334f6

    • SHA512

      20d5a60d798910f8297fb283ced6359dcc31f719aba445b631f32c9ce6ad4e2b918f1c4d7ac86ce514665a0468c111e9774a7962958616ba32e199396c09bb94

    • SSDEEP

      12288:CiHI5w4UeCcMI+9aAcSncc8l9+2SrxdpC+7UMMMDl:C67WoxIornpCgvMMDl

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks