Resubmissions

07-01-2025 16:37

250107-t48jqayqhx 10

07-01-2025 03:09

250107-dnnava1paw 10

General

  • Target

    JaffaCakes118_4a214f6d4b7e901a5971625216309d97

  • Size

    606KB

  • Sample

    250107-dnnava1paw

  • MD5

    4a214f6d4b7e901a5971625216309d97

  • SHA1

    539ca0a658f41d1b8451c31bd6d1f1b57a95856b

  • SHA256

    86433799d988249d068f359d031290b2b2fafec2a1934326badb0d2c9b68c7ee

  • SHA512

    7b692770f61122f055015c9ee2265f17e9fd7dfc01ba909b1109b62b5719febc7281bbf0871270b8e9416759a608b552703e808ddeddcebd7ccc6af219f54be0

  • SSDEEP

    12288:QZo9wqaX9lAytIcWlkhfMZVJt3uITOI7RxKPgcMQolSIBxzQQUpCW31:ZaX9lAytIclhEJkIT7igcNjIB5Qg

Malware Config

Targets

    • Target

      JaffaCakes118_4a214f6d4b7e901a5971625216309d97

    • Size

      606KB

    • MD5

      4a214f6d4b7e901a5971625216309d97

    • SHA1

      539ca0a658f41d1b8451c31bd6d1f1b57a95856b

    • SHA256

      86433799d988249d068f359d031290b2b2fafec2a1934326badb0d2c9b68c7ee

    • SHA512

      7b692770f61122f055015c9ee2265f17e9fd7dfc01ba909b1109b62b5719febc7281bbf0871270b8e9416759a608b552703e808ddeddcebd7ccc6af219f54be0

    • SSDEEP

      12288:QZo9wqaX9lAytIcWlkhfMZVJt3uITOI7RxKPgcMQolSIBxzQQUpCW31:ZaX9lAytIclhEJkIT7igcNjIB5Qg

    • 44Caliber

      An open source infostealer written in C#.

    • 44Caliber family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks