General

  • Target

    JaffaCakes118_da5ca493e248146050f9489d919dea50

  • Size

    557KB

  • Sample

    250120-drc92sylcs

  • MD5

    da5ca493e248146050f9489d919dea50

  • SHA1

    c6dce823db31c9b99f50f91bb81632c3989241d4

  • SHA256

    1765a7aa9d96fbeb33a1a3cb7a9c9a98941ac0dd66c4e9de9eacfa912b756950

  • SHA512

    99e2f05056e9679a893c9f8a23a58502fd017eeb01ccb591d8beb84c1a70cfc483d6d22db9fe5b536a17172b4d70f4677ac88429968313b020abb41717e97bbe

  • SSDEEP

    12288:1GVEPcPZgv3saFLoSQLAd08auf71uwGxI2M35VnOECtXMMzD:1GVy6Zy3say7ALau2xIV35VnOEqMMzD

Malware Config

Targets

    • Target

      JaffaCakes118_da5ca493e248146050f9489d919dea50

    • Size

      557KB

    • MD5

      da5ca493e248146050f9489d919dea50

    • SHA1

      c6dce823db31c9b99f50f91bb81632c3989241d4

    • SHA256

      1765a7aa9d96fbeb33a1a3cb7a9c9a98941ac0dd66c4e9de9eacfa912b756950

    • SHA512

      99e2f05056e9679a893c9f8a23a58502fd017eeb01ccb591d8beb84c1a70cfc483d6d22db9fe5b536a17172b4d70f4677ac88429968313b020abb41717e97bbe

    • SSDEEP

      12288:1GVEPcPZgv3saFLoSQLAd08auf71uwGxI2M35VnOECtXMMzD:1GVy6Zy3say7ALau2xIV35VnOEqMMzD

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks