General

  • Target

    3f1f707e76688e3d47e59546672dfde7_JaffaCakes118

  • Size

    556KB

  • Sample

    241013-lmnh8avapm

  • MD5

    3f1f707e76688e3d47e59546672dfde7

  • SHA1

    99f02743f5eb65d3c91120d838678927b90bc74f

  • SHA256

    deb4eebcfeef2c12799a8463ac6af549f68fe0311b67c97ff9cafd65703caf28

  • SHA512

    884d9f2926304b0acb18635081c2ac1edb931c76c5a13050216eabf22b8a9e27269a8926dbc7eacedf55351abcc33c975d2e9f21cd32b4a85c148a836f06759c

  • SSDEEP

    12288:VGMVWEswD7o/Aoy51aISoO+YlyeU81GYOCmBmXHKwMMzk:VGSWEhnoIooSUY40G4imXHKwMMzk

Malware Config

Targets

    • Target

      3f1f707e76688e3d47e59546672dfde7_JaffaCakes118

    • Size

      556KB

    • MD5

      3f1f707e76688e3d47e59546672dfde7

    • SHA1

      99f02743f5eb65d3c91120d838678927b90bc74f

    • SHA256

      deb4eebcfeef2c12799a8463ac6af549f68fe0311b67c97ff9cafd65703caf28

    • SHA512

      884d9f2926304b0acb18635081c2ac1edb931c76c5a13050216eabf22b8a9e27269a8926dbc7eacedf55351abcc33c975d2e9f21cd32b4a85c148a836f06759c

    • SSDEEP

      12288:VGMVWEswD7o/Aoy51aISoO+YlyeU81GYOCmBmXHKwMMzk:VGSWEhnoIooSUY40G4imXHKwMMzk

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks