General

  • Target

    JaffaCakes118_c7457d6056b6e41730cd7ccf4721970f

  • Size

    546KB

  • Sample

    250119-n9xfrawpbz

  • MD5

    c7457d6056b6e41730cd7ccf4721970f

  • SHA1

    8976ba3947af18448aee6062ab6c63f171eb1afe

  • SHA256

    1f8192a3eecfa2fe8826d0605ea616cf26381c618125f7267697a2ff75569b24

  • SHA512

    afaccf354d753bb3bb442a4240bcccf1572fe177300480fa48eae05a654e29acaf5ca532c85b4cfcd0af93dfeb5073f2eed510617ccf7d3259cddc7f724880db

  • SSDEEP

    12288:7SiKVtSG2dKqs1+CneWrN557DfLque1VA0g7QTMMl7:7vAiT+55nfuue1mdQTMMl7

Malware Config

Targets

    • Target

      JaffaCakes118_c7457d6056b6e41730cd7ccf4721970f

    • Size

      546KB

    • MD5

      c7457d6056b6e41730cd7ccf4721970f

    • SHA1

      8976ba3947af18448aee6062ab6c63f171eb1afe

    • SHA256

      1f8192a3eecfa2fe8826d0605ea616cf26381c618125f7267697a2ff75569b24

    • SHA512

      afaccf354d753bb3bb442a4240bcccf1572fe177300480fa48eae05a654e29acaf5ca532c85b4cfcd0af93dfeb5073f2eed510617ccf7d3259cddc7f724880db

    • SSDEEP

      12288:7SiKVtSG2dKqs1+CneWrN557DfLque1VA0g7QTMMl7:7vAiT+55nfuue1mdQTMMl7

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks