General

  • Target

    80e8c6dfad200b21b4cec551ddc70c9b_JaffaCakes118

  • Size

    115KB

  • Sample

    241031-a8nwbstpfx

  • MD5

    80e8c6dfad200b21b4cec551ddc70c9b

  • SHA1

    5b6fdf5a888a20e3ec0c6c47ce564286eee7cc39

  • SHA256

    64a39e77df0380e12d80699bcbc8bead3ae05d3787cc76c50aea536b5b680034

  • SHA512

    26352a8e9e61a09908837f329c8df5e310950d9da44df4545e114bb95f21184a1efe1a584b7a90f0abf1833dcb335f1adb64b69a569da529e8aed9131e0d13c4

  • SSDEEP

    3072:IkejW3BcRrQN3vS30h0MpgcLE+pUjPwVmMvNeTy:IkeDMNqkOMecoEaPwDle

Malware Config

Targets

    • Target

      80e8c6dfad200b21b4cec551ddc70c9b_JaffaCakes118

    • Size

      115KB

    • MD5

      80e8c6dfad200b21b4cec551ddc70c9b

    • SHA1

      5b6fdf5a888a20e3ec0c6c47ce564286eee7cc39

    • SHA256

      64a39e77df0380e12d80699bcbc8bead3ae05d3787cc76c50aea536b5b680034

    • SHA512

      26352a8e9e61a09908837f329c8df5e310950d9da44df4545e114bb95f21184a1efe1a584b7a90f0abf1833dcb335f1adb64b69a569da529e8aed9131e0d13c4

    • SSDEEP

      3072:IkejW3BcRrQN3vS30h0MpgcLE+pUjPwVmMvNeTy:IkeDMNqkOMecoEaPwDle

    • Adds policy Run key to start application

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks