General

  • Target

    484a655bbb8c10fa79ec5aff7a764505_JaffaCakes118

  • Size

    68KB

  • Sample

    241015-rmyl3syflg

  • MD5

    484a655bbb8c10fa79ec5aff7a764505

  • SHA1

    088d0166e31569f07aeac19f75c0bd18dc027fec

  • SHA256

    9bcafe89da259a8953acc45d4365896f46ed5545f5a2cca38230bce2bf0591fa

  • SHA512

    6c9207fc17c70e319ef34b140a12817e0746083222fa133347132149d6a78c8a7e329b5b698bddd5873be6b4a19fb461fe367cfd6dee4208312863b29ba07e90

  • SSDEEP

    768:ycuujsXA3XxfpCgNpTx8X7aqXFyTqDz7aw6Gh3xPxR3WtU+dpSftw:ysjzXxRBpqXYT+zOw6GhhT3WtVSV

Malware Config

Targets

    • Target

      484a655bbb8c10fa79ec5aff7a764505_JaffaCakes118

    • Size

      68KB

    • MD5

      484a655bbb8c10fa79ec5aff7a764505

    • SHA1

      088d0166e31569f07aeac19f75c0bd18dc027fec

    • SHA256

      9bcafe89da259a8953acc45d4365896f46ed5545f5a2cca38230bce2bf0591fa

    • SHA512

      6c9207fc17c70e319ef34b140a12817e0746083222fa133347132149d6a78c8a7e329b5b698bddd5873be6b4a19fb461fe367cfd6dee4208312863b29ba07e90

    • SSDEEP

      768:ycuujsXA3XxfpCgNpTx8X7aqXFyTqDz7aw6Gh3xPxR3WtU+dpSftw:ysjzXxRBpqXYT+zOw6GhhT3WtVSV

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

MITRE ATT&CK Enterprise v15

Tasks