General

  • Target

    1852f86e68d44e0c984b52936b718e6f_JaffaCakes118

  • Size

    281KB

  • Sample

    240628-b269rstgqd

  • MD5

    1852f86e68d44e0c984b52936b718e6f

  • SHA1

    77e3889f811430714dc727bf5721ccde9e0739c5

  • SHA256

    46b1c3a7497b5a067b6b1b5b8a895e463b7270f34b4283f35c007700da58429b

  • SHA512

    2bacb4931996f265a05dcf83d0146273c6558c9fcb1e02766bc77aa03291acdb02a454cf9e634fa6539eaa51cd341d6af96c84eb91b0ddef813840f4d9c97d46

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s2nUWI2zieGy7JibfxcJb:91OgLda/BpGzbfSB

Malware Config

Targets

    • Target

      1852f86e68d44e0c984b52936b718e6f_JaffaCakes118

    • Size

      281KB

    • MD5

      1852f86e68d44e0c984b52936b718e6f

    • SHA1

      77e3889f811430714dc727bf5721ccde9e0739c5

    • SHA256

      46b1c3a7497b5a067b6b1b5b8a895e463b7270f34b4283f35c007700da58429b

    • SHA512

      2bacb4931996f265a05dcf83d0146273c6558c9fcb1e02766bc77aa03291acdb02a454cf9e634fa6539eaa51cd341d6af96c84eb91b0ddef813840f4d9c97d46

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s2nUWI2zieGy7JibfxcJb:91OgLda/BpGzbfSB

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks