General

  • Target

    71ccdc7632c77e4b6232e77b525dcfe3_JaffaCakes118

  • Size

    252KB

  • Sample

    240726-abbvhawgja

  • MD5

    71ccdc7632c77e4b6232e77b525dcfe3

  • SHA1

    0b5017d8da53d5e1c34f3f1b765af854126368b0

  • SHA256

    2bfa6ddcd7bca2cbbb04ac961e67636b1011cafb071584af6ca673d2852704ae

  • SHA512

    035477ac3b5e621b470dd82116f9c03768fafb8f02389456259f6edefb70dd25210b7982552fe8400cdf8271e9d0f2164c2a3f3101008989f2b6c24d28c386d3

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s1syQzRnYg6YW7dwhK+R8:91OgLda+syQzRnYJYO

Malware Config

Targets

    • Target

      71ccdc7632c77e4b6232e77b525dcfe3_JaffaCakes118

    • Size

      252KB

    • MD5

      71ccdc7632c77e4b6232e77b525dcfe3

    • SHA1

      0b5017d8da53d5e1c34f3f1b765af854126368b0

    • SHA256

      2bfa6ddcd7bca2cbbb04ac961e67636b1011cafb071584af6ca673d2852704ae

    • SHA512

      035477ac3b5e621b470dd82116f9c03768fafb8f02389456259f6edefb70dd25210b7982552fe8400cdf8271e9d0f2164c2a3f3101008989f2b6c24d28c386d3

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s1syQzRnYg6YW7dwhK+R8:91OgLda+syQzRnYJYO

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks