General

  • Target

    41ccd9c88e79fdb1d7ee93c52bfd26b3_JaffaCakes118

  • Size

    568KB

  • Sample

    241013-yql6sawajc

  • MD5

    41ccd9c88e79fdb1d7ee93c52bfd26b3

  • SHA1

    03add21e779187ab512f6ed2867c0ae281c980d6

  • SHA256

    40c2f8236d118fa6d96e23b98e8c787671a87980f3dbdaff048198bd3b63d925

  • SHA512

    937d2878bdc29b78f9b3c9e8bedd37478a1bc73c1593472ea5c4f7a805a4e3747c9776581b826e11c32036388fc7573f1cb074e642fe0f5261e5079dca7d66d9

  • SSDEEP

    12288:R4iLwBRU4Kue47ylrAbewyyXSRK8jE/rRYDju:R4iLYUfuileewyyB8AjRYDju

Malware Config

Targets

    • Target

      41ccd9c88e79fdb1d7ee93c52bfd26b3_JaffaCakes118

    • Size

      568KB

    • MD5

      41ccd9c88e79fdb1d7ee93c52bfd26b3

    • SHA1

      03add21e779187ab512f6ed2867c0ae281c980d6

    • SHA256

      40c2f8236d118fa6d96e23b98e8c787671a87980f3dbdaff048198bd3b63d925

    • SHA512

      937d2878bdc29b78f9b3c9e8bedd37478a1bc73c1593472ea5c4f7a805a4e3747c9776581b826e11c32036388fc7573f1cb074e642fe0f5261e5079dca7d66d9

    • SSDEEP

      12288:R4iLwBRU4Kue47ylrAbewyyXSRK8jE/rRYDju:R4iLYUfuileewyyB8AjRYDju

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks