General

  • Target

    41d2e6214b87a19bea6d06a46fe3ff3a_JaffaCakes118

  • Size

    252KB

  • Sample

    240713-qhqv1avakb

  • MD5

    41d2e6214b87a19bea6d06a46fe3ff3a

  • SHA1

    68920a3569b2ab04d5fcd8b286aae19f385bd604

  • SHA256

    361faf27359446230d34a69ae5a3e360fc8cf4a5daa57da63c9e46f708e1b512

  • SHA512

    215c994a9acfdce5ffe31050f7e1848503ff488f02fe6205d8555a8145b742013d1e86e480712e7d1bcd29004e894fbd92c420b883020e39d6b9960a8cad51e1

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sJBA23CHQvqLGYKQFp9sdB2Jgm:91OgLda6l3CFGIFp+dI

Malware Config

Targets

    • Target

      41d2e6214b87a19bea6d06a46fe3ff3a_JaffaCakes118

    • Size

      252KB

    • MD5

      41d2e6214b87a19bea6d06a46fe3ff3a

    • SHA1

      68920a3569b2ab04d5fcd8b286aae19f385bd604

    • SHA256

      361faf27359446230d34a69ae5a3e360fc8cf4a5daa57da63c9e46f708e1b512

    • SHA512

      215c994a9acfdce5ffe31050f7e1848503ff488f02fe6205d8555a8145b742013d1e86e480712e7d1bcd29004e894fbd92c420b883020e39d6b9960a8cad51e1

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sJBA23CHQvqLGYKQFp9sdB2Jgm:91OgLda6l3CFGIFp+dI

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks