General
-
Target
42922d0596f9fe687625010b53a85a1d_JaffaCakes118
-
Size
636KB
-
Sample
241014-qvwl1sxgkh
-
MD5
42922d0596f9fe687625010b53a85a1d
-
SHA1
aaadbd2b63a3ddf683eae5eabcd1af8a5115160a
-
SHA256
255ef55d8f703949393522275430a2eb33c9c2eb6773b827ea283b7fdfc13303
-
SHA512
8f8432e77ac7bff099ff6b16a60b89a6914210cdb4ff3e1a7c8b2e7a6636557ed7862462a6bcb7c4a24630063d775877ef1a8e6c877ba0d32ac48c8e5675da3a
-
SSDEEP
12288:/UxcVMEpJmfwnrpQSaYLajTL+lDFa4nWbeqcX5VHHPwcQohXF3sG:/ccxpJLuXZTilDNVHHPwcQo12
Static task
static1
Behavioral task
behavioral1
Sample
42922d0596f9fe687625010b53a85a1d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
42922d0596f9fe687625010b53a85a1d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
42922d0596f9fe687625010b53a85a1d_JaffaCakes118
-
Size
636KB
-
MD5
42922d0596f9fe687625010b53a85a1d
-
SHA1
aaadbd2b63a3ddf683eae5eabcd1af8a5115160a
-
SHA256
255ef55d8f703949393522275430a2eb33c9c2eb6773b827ea283b7fdfc13303
-
SHA512
8f8432e77ac7bff099ff6b16a60b89a6914210cdb4ff3e1a7c8b2e7a6636557ed7862462a6bcb7c4a24630063d775877ef1a8e6c877ba0d32ac48c8e5675da3a
-
SSDEEP
12288:/UxcVMEpJmfwnrpQSaYLajTL+lDFa4nWbeqcX5VHHPwcQohXF3sG:/ccxpJLuXZTilDNVHHPwcQo12
-
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
2Credentials from Web Browsers
1Windows Credential Manager
1Unsecured Credentials
1Credentials In Files
1