General

  • Target

    273f2860becc962e362121501aeb995d_JaffaCakes118

  • Size

    557KB

  • Sample

    241008-3slegszcnk

  • MD5

    273f2860becc962e362121501aeb995d

  • SHA1

    8fec15bd3d0c96c8ed8c0e1e01064f591c84deb9

  • SHA256

    3506f915fff00674674aacba6cdc583e908805d26899218a7059ac2fba3ce710

  • SHA512

    5e6adf7408e942377d2539f07655d0b08e50175fe52749aef67b13714ec0099f56f412d14c69c572195cc79b3a49256cad64e39d45c00334e7ace6dd746ec67a

  • SSDEEP

    12288:MGprxNCP22qurlbSoweEIdo94haP+qeRMMzZ:MGxxNCxDpOreEgo94haPviMMzZ

Malware Config

Targets

    • Target

      273f2860becc962e362121501aeb995d_JaffaCakes118

    • Size

      557KB

    • MD5

      273f2860becc962e362121501aeb995d

    • SHA1

      8fec15bd3d0c96c8ed8c0e1e01064f591c84deb9

    • SHA256

      3506f915fff00674674aacba6cdc583e908805d26899218a7059ac2fba3ce710

    • SHA512

      5e6adf7408e942377d2539f07655d0b08e50175fe52749aef67b13714ec0099f56f412d14c69c572195cc79b3a49256cad64e39d45c00334e7ace6dd746ec67a

    • SSDEEP

      12288:MGprxNCP22qurlbSoweEIdo94haP+qeRMMzZ:MGxxNCxDpOreEgo94haPviMMzZ

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks