General

  • Target

    JaffaCakes118_c63e4c62881f65d6fbf6637fb35b29fe

  • Size

    591KB

  • Sample

    250119-nemcaswjdm

  • MD5

    c63e4c62881f65d6fbf6637fb35b29fe

  • SHA1

    87895bea42ad42c64954cb5a6e849890ed8794b1

  • SHA256

    2e903a5dfc660fa761aa455626678152d4823c3fbbeb0f39c7655fdacc2ab2ec

  • SHA512

    ce05f561d6add9ef139a8bb7eb601b891cf03e0b7c1e21961fdc89b59fb83bc5e0643eb0e5fc97a70dbb4654c1b0c046fd8af4c14f6fe3b384c3d574451de6f2

  • SSDEEP

    12288:KjiQ8CCXJ0Ktof8sJdmbwi884qPnxKyE1cgzhJRBgo:gmX2eQBJdO884qPnxJEegzhJRBgo

Malware Config

Targets

    • Target

      JaffaCakes118_c63e4c62881f65d6fbf6637fb35b29fe

    • Size

      591KB

    • MD5

      c63e4c62881f65d6fbf6637fb35b29fe

    • SHA1

      87895bea42ad42c64954cb5a6e849890ed8794b1

    • SHA256

      2e903a5dfc660fa761aa455626678152d4823c3fbbeb0f39c7655fdacc2ab2ec

    • SHA512

      ce05f561d6add9ef139a8bb7eb601b891cf03e0b7c1e21961fdc89b59fb83bc5e0643eb0e5fc97a70dbb4654c1b0c046fd8af4c14f6fe3b384c3d574451de6f2

    • SSDEEP

      12288:KjiQ8CCXJ0Ktof8sJdmbwi884qPnxKyE1cgzhJRBgo:gmX2eQBJdO884qPnxJEegzhJRBgo

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks