General

  • Target

    75d7627b633b5711c14372c099e52e01_JaffaCakes118

  • Size

    313KB

  • Sample

    240726-1kk3mszcmc

  • MD5

    75d7627b633b5711c14372c099e52e01

  • SHA1

    80cbdded7ff03e82daca31674915cf20a289587e

  • SHA256

    baee5275ada962fdbe11e76ca111f880cbe746d7237f9b0fd2d3796fffb1b4a0

  • SHA512

    8ac1ba71de57455a64b99036c8bd15d61a26aa5553b91fb1322e5715c14dfa63704705ae2a78ceaa9f3002be76e9c6ae2beea88da83483a018109d5bbdcdd5fb

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4susWiFYNnO8000d0ksXXqw3:91OgLdatsSOO0dxi

Malware Config

Targets

    • Target

      75d7627b633b5711c14372c099e52e01_JaffaCakes118

    • Size

      313KB

    • MD5

      75d7627b633b5711c14372c099e52e01

    • SHA1

      80cbdded7ff03e82daca31674915cf20a289587e

    • SHA256

      baee5275ada962fdbe11e76ca111f880cbe746d7237f9b0fd2d3796fffb1b4a0

    • SHA512

      8ac1ba71de57455a64b99036c8bd15d61a26aa5553b91fb1322e5715c14dfa63704705ae2a78ceaa9f3002be76e9c6ae2beea88da83483a018109d5bbdcdd5fb

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4susWiFYNnO8000d0ksXXqw3:91OgLdatsSOO0dxi

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks