General

  • Target

    828e5238e8086ae482d404fccab92679_JaffaCakes118

  • Size

    1.3MB

  • Sample

    241031-kyxetswalj

  • MD5

    828e5238e8086ae482d404fccab92679

  • SHA1

    fce0774fcf5c03599a50b3abf8fa311f6cebaa6a

  • SHA256

    d08524ad8c058d5a44173366a0ad5c1d9106cd98beb580a32efd5bcb3f1c6094

  • SHA512

    6d9ed7478086112a4b7ef2ac1f96c38d870d7bd2d5f18eb6c942f25e504829ff6af9da9f303565f3919a992bfd3e5fb222cbc5f5ff36be0480392e46805e30ea

  • SSDEEP

    24576:g33RSdYIE20sCYUQxEnZ4NGAARdYRUuLHEwpzxz0DLacT06:gnRSdksCYiZ6AuLHEwpdz0DucT5

Malware Config

Targets

    • Target

      828e5238e8086ae482d404fccab92679_JaffaCakes118

    • Size

      1.3MB

    • MD5

      828e5238e8086ae482d404fccab92679

    • SHA1

      fce0774fcf5c03599a50b3abf8fa311f6cebaa6a

    • SHA256

      d08524ad8c058d5a44173366a0ad5c1d9106cd98beb580a32efd5bcb3f1c6094

    • SHA512

      6d9ed7478086112a4b7ef2ac1f96c38d870d7bd2d5f18eb6c942f25e504829ff6af9da9f303565f3919a992bfd3e5fb222cbc5f5ff36be0480392e46805e30ea

    • SSDEEP

      24576:g33RSdYIE20sCYUQxEnZ4NGAARdYRUuLHEwpzxz0DLacT06:gnRSdksCYiZ6AuLHEwpdz0DucT5

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks