Resubmissions

20-07-2024 08:58

240720-kw9x5svepj 7

General

  • Target

    5fd5796389944ae0f6b9fede3bbf58f0_JaffaCakes118

  • Size

    281KB

  • Sample

    240720-kw9x5svepj

  • MD5

    5fd5796389944ae0f6b9fede3bbf58f0

  • SHA1

    87ccea40c5c84f14c12dba64acf2cd376b7ad479

  • SHA256

    40ce851ba571d1396bb5a6127e725f76b49893f5b8aecd1055ef1907b3a4448b

  • SHA512

    0b0d0c923fbc1cb0b285a2f6e6ac322e6ef034a837208e67bd7b4db9b7e4f313dc511dc146e916bc4a0515179681b680601b02cd3fb86fea2d8fc43fe30e7ece

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sER64YaZXpkvXjiA1wghRZ:91OgLda1R64YGoWAv

Malware Config

Targets

    • Target

      5fd5796389944ae0f6b9fede3bbf58f0_JaffaCakes118

    • Size

      281KB

    • MD5

      5fd5796389944ae0f6b9fede3bbf58f0

    • SHA1

      87ccea40c5c84f14c12dba64acf2cd376b7ad479

    • SHA256

      40ce851ba571d1396bb5a6127e725f76b49893f5b8aecd1055ef1907b3a4448b

    • SHA512

      0b0d0c923fbc1cb0b285a2f6e6ac322e6ef034a837208e67bd7b4db9b7e4f313dc511dc146e916bc4a0515179681b680601b02cd3fb86fea2d8fc43fe30e7ece

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sER64YaZXpkvXjiA1wghRZ:91OgLda1R64YGoWAv

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks