General

  • Target

    24bc095d85bbfe947df8db27b7648b0b_JaffaCakes118

  • Size

    252KB

  • Sample

    240704-fsn42swcnj

  • MD5

    24bc095d85bbfe947df8db27b7648b0b

  • SHA1

    1f841afe0d302a91fc11e089c8b06dd991db780b

  • SHA256

    95238a13c254a07d3002679e9c6c9454bd02e78f8f6fc0e1c17a4723a9dd9249

  • SHA512

    a720a700c946ee831d386eb71045222220a5020ad31c01b4a9deee483d59d4a25c025cb93a67d13b2aaf7b6be5c860d088fb5392a8968bbd82db3862cb2cdf33

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4se2wY7bAkEWJecG:91OgLdax2T70kHJjG

Malware Config

Targets

    • Target

      24bc095d85bbfe947df8db27b7648b0b_JaffaCakes118

    • Size

      252KB

    • MD5

      24bc095d85bbfe947df8db27b7648b0b

    • SHA1

      1f841afe0d302a91fc11e089c8b06dd991db780b

    • SHA256

      95238a13c254a07d3002679e9c6c9454bd02e78f8f6fc0e1c17a4723a9dd9249

    • SHA512

      a720a700c946ee831d386eb71045222220a5020ad31c01b4a9deee483d59d4a25c025cb93a67d13b2aaf7b6be5c860d088fb5392a8968bbd82db3862cb2cdf33

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4se2wY7bAkEWJecG:91OgLdax2T70kHJjG

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks