Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06/01/2025, 09:04
General
-
Target
JaffaCakes118_1aa66dbc02241d05daf0e811c97633b3.exe
-
Size
1.2MB
-
MD5
1aa66dbc02241d05daf0e811c97633b3
-
SHA1
9c13f996b021f8beb04b04e1cc504199e0318964
-
SHA256
7c9ecec09937a16311a39bacb02cde08b50587ee73328a11d8b2f0c0c185717b
-
SHA512
d024b652d507ba5146625a12f19c54dd1c23091405f8b0c5fb43a941872f2f95be108bbb14d4d1be624ad395f6a6d1dd0c3330404a62701a514c3feed2919ede
-
SSDEEP
24576:yzd9Sm6s3SB4VbhzGcHb0bBhXxtyesOlU0YOTAXnA91IV7HExDaIv:yzTSmvdcwb0VhXHlrTKA91IV7HExOIv
Malware Config
Signatures
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
-
Uses Tor communications 1 TTPs
Malware can proxy its traffic through Tor for more anonymity.
-
Browser Information Discovery 1 TTPs
Enumerate browser information.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1aa66dbc02241d05daf0e811c97633b3.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1aa66dbc02241d05daf0e811c97633b3.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22B
MD576cdb2bad9582d23c1f6f4d868218d6c
SHA1b04f3ee8f5e43fa3b162981b50bb72fe1acabb33
SHA2568739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
SHA5125e2f959f36b66df0580a94f384c5fc1ceeec4b2a3925f062d7b68f21758b86581ac2adcfdde73a171a28496e758ef1b23ca4951c05455cdae9357cc3b5a5825f
-
Filesize
324KB
MD542b6ce8bb3ad66d7f3e0863d22608c35
SHA19deee3167fa2f489318f531319992b2be354f164
SHA256c32e10b9ef6de348421b6842bfce8991557f8d2e3cd2c09a0c1012e731cadbea
SHA51275bfedc8e5b6ec769900fff64b0a0453d8b9a23ba851bb2c1dda0a0c84d78d63b1b8d6fbb42f7ca3a84b604952e58ca4767bb28e3d6d98566894cb920d6bb8c7
-
Filesize
22B
MD58b283ab24c559265920a3b4255881d62
SHA1719c8f93d1be0d0dc011c259d30e4c809fcfede2
SHA256cf3e7fd551123a5de930e3a3e4fb5337b64f99005740f1a87680c2fbb4d562dc
SHA512b85424a08782697e2cfa33e2a9b3ce8b8d9421154ab05ae4466e54f9b4081cfe5e8c0e7d2ff8663ba235cc3772707709d19b13d0dbb4863ca13cacd252831c5e