General

  • Target

    JaffaCakes118_d1744aa3dbc984b049c367497aaea726

  • Size

    546KB

  • Sample

    250119-ylxrqatmgr

  • MD5

    d1744aa3dbc984b049c367497aaea726

  • SHA1

    db259e0bb42fdb7ed90801dcc6ff0e78deb96f93

  • SHA256

    19cd2e3c147e42ae2e13ce2fa055d3f2805342fcf5f83c78eee5dacbc3fd58d4

  • SHA512

    b6b639133fe77e5c9d22be25825bcd51283cbbfef8b1a7e9cc47cc0838c5c31f922d968af19b12bd1676df530a7199bfca1cd2cca9b3fc93b8b36b3747a44d5d

  • SSDEEP

    12288:GiHujSYpZ+hUX91zan88xIHrm94OsBrlXmMMIr:GzuYpjm88xH6OArlXmMMIr

Malware Config

Targets

    • Target

      JaffaCakes118_d1744aa3dbc984b049c367497aaea726

    • Size

      546KB

    • MD5

      d1744aa3dbc984b049c367497aaea726

    • SHA1

      db259e0bb42fdb7ed90801dcc6ff0e78deb96f93

    • SHA256

      19cd2e3c147e42ae2e13ce2fa055d3f2805342fcf5f83c78eee5dacbc3fd58d4

    • SHA512

      b6b639133fe77e5c9d22be25825bcd51283cbbfef8b1a7e9cc47cc0838c5c31f922d968af19b12bd1676df530a7199bfca1cd2cca9b3fc93b8b36b3747a44d5d

    • SSDEEP

      12288:GiHujSYpZ+hUX91zan88xIHrm94OsBrlXmMMIr:GzuYpjm88xH6OArlXmMMIr

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks