General

  • Target

    262cd8a3e622a318b1ca55d2cb07a9b5_JaffaCakes118

  • Size

    313KB

  • Sample

    240704-zp2era1arb

  • MD5

    262cd8a3e622a318b1ca55d2cb07a9b5

  • SHA1

    86a87cf6fc3b48e7acb1244d092793642f01c1f0

  • SHA256

    de19b63b449c53addc41daaf9c682a4ce8f69df00a02b0e9a83e483371d9b628

  • SHA512

    550aaef3f66e24cdababa7c6bb28218c923a3690d16d49f58ff9ad284acec94ba160ca1dab0bc5d2097b81267632c95d5a5d91102cee7e6011292501bc4fb13a

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sA2oRREAVi6K5EyV3Gor6UJuwd8MjpJ:91OgLdaB0AVJK9V3Go2UIIB

Malware Config

Targets

    • Target

      262cd8a3e622a318b1ca55d2cb07a9b5_JaffaCakes118

    • Size

      313KB

    • MD5

      262cd8a3e622a318b1ca55d2cb07a9b5

    • SHA1

      86a87cf6fc3b48e7acb1244d092793642f01c1f0

    • SHA256

      de19b63b449c53addc41daaf9c682a4ce8f69df00a02b0e9a83e483371d9b628

    • SHA512

      550aaef3f66e24cdababa7c6bb28218c923a3690d16d49f58ff9ad284acec94ba160ca1dab0bc5d2097b81267632c95d5a5d91102cee7e6011292501bc4fb13a

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sA2oRREAVi6K5EyV3Gor6UJuwd8MjpJ:91OgLdaB0AVJK9V3Go2UIIB

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks