General

  • Target

    393bdaf4559f495dec15e473278af117_JaffaCakes118

  • Size

    315KB

  • Sample

    240711-qbb39szdlg

  • MD5

    393bdaf4559f495dec15e473278af117

  • SHA1

    6fca3fa0453d7c4907f1cf533255a37b62905b48

  • SHA256

    07b8cde6ee103d0516c760f424b16c2a771874855a71c48db9af72d58d0a27eb

  • SHA512

    82adf751e97ffe6cddbf9bb14388f2fdef7684bfb2209a05e87a4a60dd82284fad47bceabd0acbd4893074d45d692950e37565dbdff91f9f6f1fb489224df4f9

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sRn55yxK/0mEqVqWi60J5ZNq+4gw1:91OgLda0b0xq0Wi66NqVB

Malware Config

Targets

    • Target

      393bdaf4559f495dec15e473278af117_JaffaCakes118

    • Size

      315KB

    • MD5

      393bdaf4559f495dec15e473278af117

    • SHA1

      6fca3fa0453d7c4907f1cf533255a37b62905b48

    • SHA256

      07b8cde6ee103d0516c760f424b16c2a771874855a71c48db9af72d58d0a27eb

    • SHA512

      82adf751e97ffe6cddbf9bb14388f2fdef7684bfb2209a05e87a4a60dd82284fad47bceabd0acbd4893074d45d692950e37565dbdff91f9f6f1fb489224df4f9

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sRn55yxK/0mEqVqWi60J5ZNq+4gw1:91OgLda0b0xq0Wi66NqVB

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks