General

  • Target

    4a06094a2cb4ec171ca90d8cd9ab4c00_JaffaCakes118

  • Size

    115KB

  • Sample

    241015-z1p6vs1gkr

  • MD5

    4a06094a2cb4ec171ca90d8cd9ab4c00

  • SHA1

    2427fc84ed0a916f7ab2145fd74cfee0ed4080fb

  • SHA256

    7ea2721c10f3d48f9c2042dbc94dcb1fdcb493f9774871305bf6839aafaf2d03

  • SHA512

    f470dbe906e4859c6162d0d466f18a24dda4d26d51cd96a44567799d37ea29f95a4ec639e60049e24fa91cd8d0b67938b4a8bf120098861010589d0a253ef4f2

  • SSDEEP

    1536:Zs2uA+sbIxabXdirWka51vNc+FvOSSdigYLau9S4A6lm:Z/hVir6rvN7xdS/rV5

Malware Config

Targets

    • Target

      4a06094a2cb4ec171ca90d8cd9ab4c00_JaffaCakes118

    • Size

      115KB

    • MD5

      4a06094a2cb4ec171ca90d8cd9ab4c00

    • SHA1

      2427fc84ed0a916f7ab2145fd74cfee0ed4080fb

    • SHA256

      7ea2721c10f3d48f9c2042dbc94dcb1fdcb493f9774871305bf6839aafaf2d03

    • SHA512

      f470dbe906e4859c6162d0d466f18a24dda4d26d51cd96a44567799d37ea29f95a4ec639e60049e24fa91cd8d0b67938b4a8bf120098861010589d0a253ef4f2

    • SSDEEP

      1536:Zs2uA+sbIxabXdirWka51vNc+FvOSSdigYLau9S4A6lm:Z/hVir6rvN7xdS/rV5

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks