General

  • Target

    JaffaCakes118_b7cda70cbb94b6118791ca56c8f3f6554fd5defbb194bd8bd963654c9164d9fc

  • Size

    275KB

  • Sample

    241229-gpddtavkdy

  • MD5

    cc2eb1c47b888609af9f408aa765c09a

  • SHA1

    7c548ca820cd1b992ec7f879fa83ff4678b047be

  • SHA256

    b7cda70cbb94b6118791ca56c8f3f6554fd5defbb194bd8bd963654c9164d9fc

  • SHA512

    0808b78730915e298975512b07d5a71cabe0cc3275d24835e2729e31dc98bbecf335e29758f31bd03050ab4032adca7f60b0de14253d7eb10615f6e0dc9d38c0

  • SSDEEP

    6144:EMbC0SbzJjbSLPWstc7e72gk6ZVxw4ufGxs4lDWyWZsPGhOikTuid8umn6Bg:EG/CzJxgk4w4ufGJlDFWZsbikTuidB+j

Malware Config

Extracted

Family

cryptbot

C2

cemahq15.top

moresh01.top

Attributes
  • payload_url

    http://bojwfi01.top/download.php?file=lv.exe

Targets

    • Target

      JaffaCakes118_b7cda70cbb94b6118791ca56c8f3f6554fd5defbb194bd8bd963654c9164d9fc

    • Size

      275KB

    • MD5

      cc2eb1c47b888609af9f408aa765c09a

    • SHA1

      7c548ca820cd1b992ec7f879fa83ff4678b047be

    • SHA256

      b7cda70cbb94b6118791ca56c8f3f6554fd5defbb194bd8bd963654c9164d9fc

    • SHA512

      0808b78730915e298975512b07d5a71cabe0cc3275d24835e2729e31dc98bbecf335e29758f31bd03050ab4032adca7f60b0de14253d7eb10615f6e0dc9d38c0

    • SSDEEP

      6144:EMbC0SbzJjbSLPWstc7e72gk6ZVxw4ufGxs4lDWyWZsPGhOikTuid8umn6Bg:EG/CzJxgk4w4ufGJlDFWZsbikTuidB+j

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks