General

  • Target

    c8f3115838b57dcebe58ca4a63bbb9f9_JaffaCakes118

  • Size

    12KB

  • Sample

    241205-xc1atasrhn

  • MD5

    c8f3115838b57dcebe58ca4a63bbb9f9

  • SHA1

    1499782dda07a69281fcf4b77012dab58ea241fe

  • SHA256

    97754aecbf59870d595178917a5c8ce6ff8211d20bc804332233b85fcb7a26c4

  • SHA512

    a38dc1be0eaf93e2874d680b5d7af357b45cf50bf58cb6c2c07aaf5ae6a43a6b1bb8548653ae13ee51672737ed83506f225794996f69d5caa92a4ff83ab9c6f6

  • SSDEEP

    192:o/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMrmEy:oebFNw4Pk1itKkpAjjI2YpdmqD

Malware Config

Targets

    • Target

      c8f3115838b57dcebe58ca4a63bbb9f9_JaffaCakes118

    • Size

      12KB

    • MD5

      c8f3115838b57dcebe58ca4a63bbb9f9

    • SHA1

      1499782dda07a69281fcf4b77012dab58ea241fe

    • SHA256

      97754aecbf59870d595178917a5c8ce6ff8211d20bc804332233b85fcb7a26c4

    • SHA512

      a38dc1be0eaf93e2874d680b5d7af357b45cf50bf58cb6c2c07aaf5ae6a43a6b1bb8548653ae13ee51672737ed83506f225794996f69d5caa92a4ff83ab9c6f6

    • SSDEEP

      192:o/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMrmEy:oebFNw4Pk1itKkpAjjI2YpdmqD

    • Renames multiple (2210) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Drops file in Drivers directory

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks