General

  • Target

    032628f38b10d39ec88e26e02e642f73_JaffaCakes118

  • Size

    313KB

  • Sample

    240620-f1ekks1cnh

  • MD5

    032628f38b10d39ec88e26e02e642f73

  • SHA1

    8a024b716e2f4585776ba93357d86b9272d450b3

  • SHA256

    e8a37232736554ebd680ae60311883164ac2b597137fde704c8115564ce33d87

  • SHA512

    f5e58d25563acf28473bed54f0d6666a26cb8c0a96cc796b23d80cefbb5f6362d314c07f3ce6d3d0289b281ac25ad0b9987b66ab4f2044e83a296d3b829a29fa

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sFgzIzofgFePI6bScmdzF/IwcIVFK9D7UN6:91OgLdamcS6VeRQwg

Malware Config

Targets

    • Target

      032628f38b10d39ec88e26e02e642f73_JaffaCakes118

    • Size

      313KB

    • MD5

      032628f38b10d39ec88e26e02e642f73

    • SHA1

      8a024b716e2f4585776ba93357d86b9272d450b3

    • SHA256

      e8a37232736554ebd680ae60311883164ac2b597137fde704c8115564ce33d87

    • SHA512

      f5e58d25563acf28473bed54f0d6666a26cb8c0a96cc796b23d80cefbb5f6362d314c07f3ce6d3d0289b281ac25ad0b9987b66ab4f2044e83a296d3b829a29fa

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sFgzIzofgFePI6bScmdzF/IwcIVFK9D7UN6:91OgLdamcS6VeRQwg

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks