General

  • Target

    4236367e6eaf4670f4e69495875baf31_JaffaCakes118

  • Size

    313KB

  • Sample

    240713-sk614swbnj

  • MD5

    4236367e6eaf4670f4e69495875baf31

  • SHA1

    0203db94cf8929fbe639161bf176df881940a775

  • SHA256

    09a7ae97cd5f7c305ab766754cf8a3edea60ef159b9e6f134d3a545789de21f7

  • SHA512

    89d0f5374afd2668067b9ce7d37c4e9ae5941d63ca86494e21ba4e0e32991fc2ce153db44c5875dcf96ce544fe455390c4177416bb621107962f70f58ad5de0a

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4ssOYuI/3Gy0Owu5zt+AxW19p9pLMTZk:91OgLdaVIIPf0O5zt+GWHp/LMTZk

Malware Config

Targets

    • Target

      4236367e6eaf4670f4e69495875baf31_JaffaCakes118

    • Size

      313KB

    • MD5

      4236367e6eaf4670f4e69495875baf31

    • SHA1

      0203db94cf8929fbe639161bf176df881940a775

    • SHA256

      09a7ae97cd5f7c305ab766754cf8a3edea60ef159b9e6f134d3a545789de21f7

    • SHA512

      89d0f5374afd2668067b9ce7d37c4e9ae5941d63ca86494e21ba4e0e32991fc2ce153db44c5875dcf96ce544fe455390c4177416bb621107962f70f58ad5de0a

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4ssOYuI/3Gy0Owu5zt+AxW19p9pLMTZk:91OgLdaVIIPf0O5zt+GWHp/LMTZk

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks