General

  • Target

    3adec73bf2724b4b3943727801238ee9_JaffaCakes118

  • Size

    251KB

  • Sample

    240711-1vx5yswcjp

  • MD5

    3adec73bf2724b4b3943727801238ee9

  • SHA1

    c1e9817ec5cecd23299af07e831425bbdd205e17

  • SHA256

    67eeb3aa54da3d391f401f6ad0f1acaadfcc87f72f4481fae98901a29caf3779

  • SHA512

    4d4716f759d3c7c513ce5951b1b7fe35501eec148fd960243aaed64a08ae154fcf047de6285bad6f3a25fe893c25aacf32c22085dbc0283cf90bcb2f44120d22

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4slNSwi1X9/4vkseXW1sejsU9ZXYQ:91OgLdaKQ1X9/CCewYP

Malware Config

Targets

    • Target

      3adec73bf2724b4b3943727801238ee9_JaffaCakes118

    • Size

      251KB

    • MD5

      3adec73bf2724b4b3943727801238ee9

    • SHA1

      c1e9817ec5cecd23299af07e831425bbdd205e17

    • SHA256

      67eeb3aa54da3d391f401f6ad0f1acaadfcc87f72f4481fae98901a29caf3779

    • SHA512

      4d4716f759d3c7c513ce5951b1b7fe35501eec148fd960243aaed64a08ae154fcf047de6285bad6f3a25fe893c25aacf32c22085dbc0283cf90bcb2f44120d22

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4slNSwi1X9/4vkseXW1sejsU9ZXYQ:91OgLdaKQ1X9/CCewYP

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks