General

  • Target

    42922d0596f9fe687625010b53a85a1d_JaffaCakes118

  • Size

    636KB

  • Sample

    241014-qvwl1sxgkh

  • MD5

    42922d0596f9fe687625010b53a85a1d

  • SHA1

    aaadbd2b63a3ddf683eae5eabcd1af8a5115160a

  • SHA256

    255ef55d8f703949393522275430a2eb33c9c2eb6773b827ea283b7fdfc13303

  • SHA512

    8f8432e77ac7bff099ff6b16a60b89a6914210cdb4ff3e1a7c8b2e7a6636557ed7862462a6bcb7c4a24630063d775877ef1a8e6c877ba0d32ac48c8e5675da3a

  • SSDEEP

    12288:/UxcVMEpJmfwnrpQSaYLajTL+lDFa4nWbeqcX5VHHPwcQohXF3sG:/ccxpJLuXZTilDNVHHPwcQo12

Malware Config

Targets

    • Target

      42922d0596f9fe687625010b53a85a1d_JaffaCakes118

    • Size

      636KB

    • MD5

      42922d0596f9fe687625010b53a85a1d

    • SHA1

      aaadbd2b63a3ddf683eae5eabcd1af8a5115160a

    • SHA256

      255ef55d8f703949393522275430a2eb33c9c2eb6773b827ea283b7fdfc13303

    • SHA512

      8f8432e77ac7bff099ff6b16a60b89a6914210cdb4ff3e1a7c8b2e7a6636557ed7862462a6bcb7c4a24630063d775877ef1a8e6c877ba0d32ac48c8e5675da3a

    • SSDEEP

      12288:/UxcVMEpJmfwnrpQSaYLajTL+lDFa4nWbeqcX5VHHPwcQohXF3sG:/ccxpJLuXZTilDNVHHPwcQo12

    • Credentials from Password Stores: Windows Credential Manager

      Suspicious access to Credentials History.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks