General

  • Target

    8525f45f500348804363ffeef2163fa9_JaffaCakes118

  • Size

    313KB

  • Sample

    240810-hg2bcazbmk

  • MD5

    8525f45f500348804363ffeef2163fa9

  • SHA1

    1349bdce1be2c43efaafe39c1e6b97a288ce8e76

  • SHA256

    12439fa430fce55ff40b06ad1261336a2fd9d640b21a51a35fe1092b26a4ea2c

  • SHA512

    734d1ffbe28bfe6d4f32009ea8eac190b517c27eeccbbc028b5d0ef959015a6291728db4b569823eae0111a8ea82381053d7568323a57fd64f342c4ba6d10e40

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4szVchbJCNNZQ8syISDACjpA5pSNXEaVhh9Es1d:91OgLdaN9s5DAC1AWNXEa9r

Malware Config

Targets

    • Target

      8525f45f500348804363ffeef2163fa9_JaffaCakes118

    • Size

      313KB

    • MD5

      8525f45f500348804363ffeef2163fa9

    • SHA1

      1349bdce1be2c43efaafe39c1e6b97a288ce8e76

    • SHA256

      12439fa430fce55ff40b06ad1261336a2fd9d640b21a51a35fe1092b26a4ea2c

    • SHA512

      734d1ffbe28bfe6d4f32009ea8eac190b517c27eeccbbc028b5d0ef959015a6291728db4b569823eae0111a8ea82381053d7568323a57fd64f342c4ba6d10e40

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4szVchbJCNNZQ8syISDACjpA5pSNXEaVhh9Es1d:91OgLdaN9s5DAC1AWNXEa9r

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks