General

  • Target

    76aa2b6c818db74f7d31f0818671e50c_JaffaCakes118

  • Size

    313KB

  • Sample

    240727-ck71eazhjj

  • MD5

    76aa2b6c818db74f7d31f0818671e50c

  • SHA1

    e98b1a6688aba6421ff4f5c070c0b49bd4063826

  • SHA256

    c3626378638fb0df73aeddf04a7da5341992afed767e149f7aec63863fb5664e

  • SHA512

    3aab57365b2e8c316cedf7c38ed291ca5ebbb83f25d5a361de8c394e0191a1a5a22c89c6d3b65a0ca5ceb7253554ccd99b8101d562a0a20df07eb3562925fc8d

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s/xuz+3sdW0ShYpu1YiBb+YrTWoAih/EXpr1K:91OgLdaWAmQrWYiNZrxfhsXpr1K

Malware Config

Targets

    • Target

      76aa2b6c818db74f7d31f0818671e50c_JaffaCakes118

    • Size

      313KB

    • MD5

      76aa2b6c818db74f7d31f0818671e50c

    • SHA1

      e98b1a6688aba6421ff4f5c070c0b49bd4063826

    • SHA256

      c3626378638fb0df73aeddf04a7da5341992afed767e149f7aec63863fb5664e

    • SHA512

      3aab57365b2e8c316cedf7c38ed291ca5ebbb83f25d5a361de8c394e0191a1a5a22c89c6d3b65a0ca5ceb7253554ccd99b8101d562a0a20df07eb3562925fc8d

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s/xuz+3sdW0ShYpu1YiBb+YrTWoAih/EXpr1K:91OgLdaWAmQrWYiNZrxfhsXpr1K

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks