General
-
Target
82c1a0b1c9b7d5364438a6c5f8905d27_JaffaCakes118
-
Size
544KB
-
Sample
241031-mz1vrayjcl
-
MD5
82c1a0b1c9b7d5364438a6c5f8905d27
-
SHA1
76be0deb50148d41d066f3b5a0cb8331f0bee604
-
SHA256
d479557d4149cb7d48a96918bfa2e1c89d4152f7933114c1433a699f8dc1e664
-
SHA512
4415e594a9cbab2fcf66e77d79a59158c18fdf857516d8151b08548994ef57201ff3a04ceda5b2ad2bb4a3e3b7d6fed807a122f277218baa4df87e7474a5cd27
-
SSDEEP
6144:ZYCRJRz7Z4FCWmf71/pNpN/i1UDoBkJ9b3PtfjGigourbx:eKJRz7pW6NpUUDoBkLlfjGigoux
Static task
static1
Behavioral task
behavioral1
Sample
82c1a0b1c9b7d5364438a6c5f8905d27_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
82c1a0b1c9b7d5364438a6c5f8905d27_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
82c1a0b1c9b7d5364438a6c5f8905d27_JaffaCakes118
-
Size
544KB
-
MD5
82c1a0b1c9b7d5364438a6c5f8905d27
-
SHA1
76be0deb50148d41d066f3b5a0cb8331f0bee604
-
SHA256
d479557d4149cb7d48a96918bfa2e1c89d4152f7933114c1433a699f8dc1e664
-
SHA512
4415e594a9cbab2fcf66e77d79a59158c18fdf857516d8151b08548994ef57201ff3a04ceda5b2ad2bb4a3e3b7d6fed807a122f277218baa4df87e7474a5cd27
-
SSDEEP
6144:ZYCRJRz7Z4FCWmf71/pNpN/i1UDoBkJ9b3PtfjGigourbx:eKJRz7pW6NpUUDoBkLlfjGigoux
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2