General

  • Target

    ab80df254c39727f6d12fd5fa9a65c0e_JaffaCakes118

  • Size

    663KB

  • Sample

    240614-z35dkawejg

  • MD5

    ab80df254c39727f6d12fd5fa9a65c0e

  • SHA1

    9bf7cf0d003f3175dbe8913a3430a4ccda463e7f

  • SHA256

    23af299b9a50caea18000dbd7a7e6de5ca5498f9253871e695259ff967637557

  • SHA512

    6e202aa3860cbf48fe7c269a9647eb66a3b2186a994f5eaad6a93e33cce1509405a878aa60a95cdeb9959949c422abb6d1782a2c42df8754a75efba18cca959b

  • SSDEEP

    12288:yRCLVK7Y4Zpgl+PSwJCO5OHaJEOK/HnVLS+wEbr6ip4z8/ICO0Wk2rNqe07:yoiZS8PwO5O6l+yyWE4zvr0Ms

Malware Config

Targets

    • Target

      ab80df254c39727f6d12fd5fa9a65c0e_JaffaCakes118

    • Size

      663KB

    • MD5

      ab80df254c39727f6d12fd5fa9a65c0e

    • SHA1

      9bf7cf0d003f3175dbe8913a3430a4ccda463e7f

    • SHA256

      23af299b9a50caea18000dbd7a7e6de5ca5498f9253871e695259ff967637557

    • SHA512

      6e202aa3860cbf48fe7c269a9647eb66a3b2186a994f5eaad6a93e33cce1509405a878aa60a95cdeb9959949c422abb6d1782a2c42df8754a75efba18cca959b

    • SSDEEP

      12288:yRCLVK7Y4Zpgl+PSwJCO5OHaJEOK/HnVLS+wEbr6ip4z8/ICO0Wk2rNqe07:yoiZS8PwO5O6l+yyWE4zvr0Ms

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

MITRE ATT&CK Enterprise v15

Tasks