General

  • Target

    8728369662c31d6b151e9778cb952d20_JaffaCakes118

  • Size

    315KB

  • Sample

    240810-w1ehkswbjc

  • MD5

    8728369662c31d6b151e9778cb952d20

  • SHA1

    7c4c847ab947b97fdd7bd038c5f8314280921667

  • SHA256

    513f82aa2764aab872eb0d72d2228ac651cc964a26be4726bb3679591d2ed638

  • SHA512

    0a92aa2db613ebee85d757f3307a7dd6dce4456a3bd7988465498df8c2150d7bf4d45e694c63940f963422ce98e476a525910e03b854e76c2189fc7880117493

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sMyCwuphHJ3WNQaXA7IBcF9A+82h7q5Wcw1:91OgLdavyxuHHJiQ7g09FlB1

Malware Config

Targets

    • Target

      8728369662c31d6b151e9778cb952d20_JaffaCakes118

    • Size

      315KB

    • MD5

      8728369662c31d6b151e9778cb952d20

    • SHA1

      7c4c847ab947b97fdd7bd038c5f8314280921667

    • SHA256

      513f82aa2764aab872eb0d72d2228ac651cc964a26be4726bb3679591d2ed638

    • SHA512

      0a92aa2db613ebee85d757f3307a7dd6dce4456a3bd7988465498df8c2150d7bf4d45e694c63940f963422ce98e476a525910e03b854e76c2189fc7880117493

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sMyCwuphHJ3WNQaXA7IBcF9A+82h7q5Wcw1:91OgLdavyxuHHJiQ7g09FlB1

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks