General
-
Target
JaffaCakes118_65e6b90b94e0df9e68e067aab861efa8
-
Size
251KB
-
Sample
250102-r9ahrsylel
-
MD5
65e6b90b94e0df9e68e067aab861efa8
-
SHA1
3da7e5712b4fb69df4e8afbdb49345c8bd85ee53
-
SHA256
1e035ccfce120aa4599cddb67318c219d7248de40e279755b84162f12c3e7778
-
SHA512
ba4eb6d0d5aecc49a3ccca96ee758d632bc2129c32d214a9a264ea4399ad18ddb8cff968a096c7d11288e39a93b2edce8d8aa7a95888140bc488c4b90aaff89d
-
SSDEEP
6144:kXCRRVMMMMMM2MMMMM/NRatUtQRQVBvcwH5Rr8Xo/BZqa7CO:kSRRaMMMMM2MMMMM/7atGQRQL7ZRlZZz
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_65e6b90b94e0df9e68e067aab861efa8.exe
Resource
win7-20241023-en
Malware Config
Targets
-
-
Target
JaffaCakes118_65e6b90b94e0df9e68e067aab861efa8
-
Size
251KB
-
MD5
65e6b90b94e0df9e68e067aab861efa8
-
SHA1
3da7e5712b4fb69df4e8afbdb49345c8bd85ee53
-
SHA256
1e035ccfce120aa4599cddb67318c219d7248de40e279755b84162f12c3e7778
-
SHA512
ba4eb6d0d5aecc49a3ccca96ee758d632bc2129c32d214a9a264ea4399ad18ddb8cff968a096c7d11288e39a93b2edce8d8aa7a95888140bc488c4b90aaff89d
-
SSDEEP
6144:kXCRRVMMMMMM2MMMMM/NRatUtQRQVBvcwH5Rr8Xo/BZqa7CO:kSRRaMMMMM2MMMMM/7atGQRQL7ZRlZZz
-
Expiro family
-
Expiro payload
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2