General

  • Target

    4c48c15cae6c9409729e8620d5fa835d_JaffaCakes118

  • Size

    313KB

  • Sample

    240716-b291nayhmq

  • MD5

    4c48c15cae6c9409729e8620d5fa835d

  • SHA1

    6269f6b8c0dedee3c5b1a7ca65b390a9aa566466

  • SHA256

    922690bae645c73e61782b728480d61efeb8bcac722d631ae95413219fc07f04

  • SHA512

    2716ad78ad8442f23f0a889eb327a9410e2e08b2c0ba207b8518ef0a8f68daf25af3b0537cc222830cc99d74bf3617fb49748270ea253f5f20660b68cf14dd63

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s9swq9Tw2hPY1ijialDzH4B/E:91OgLdaQCPPTmqe8

Malware Config

Targets

    • Target

      4c48c15cae6c9409729e8620d5fa835d_JaffaCakes118

    • Size

      313KB

    • MD5

      4c48c15cae6c9409729e8620d5fa835d

    • SHA1

      6269f6b8c0dedee3c5b1a7ca65b390a9aa566466

    • SHA256

      922690bae645c73e61782b728480d61efeb8bcac722d631ae95413219fc07f04

    • SHA512

      2716ad78ad8442f23f0a889eb327a9410e2e08b2c0ba207b8518ef0a8f68daf25af3b0537cc222830cc99d74bf3617fb49748270ea253f5f20660b68cf14dd63

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s9swq9Tw2hPY1ijialDzH4B/E:91OgLdaQCPPTmqe8

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks