General

  • Target

    8cde61ffcac482f4a97a34c2d444f15b_JaffaCakes118

  • Size

    313KB

  • Sample

    240812-cendtavamg

  • MD5

    8cde61ffcac482f4a97a34c2d444f15b

  • SHA1

    e33ed26ab51e54c94a8a7bf66483c9b1323c6385

  • SHA256

    ff2b44f7d700797f6e7b406985d6e352a0ca1088b9a5c80aa73a77e50708c658

  • SHA512

    9a99c2a63bbcf5bc56ee1cf88c8f6d108fc6d1c12ba14cd6b2e7706fb12332855617f107986c20b198d8942a13687e28b1bb9e9412ada6836d52a4bfc357f37f

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sub/dvzf6KyGYTRCiYWkz:91OgLdaJ/tA8iYfz

Malware Config

Targets

    • Target

      8cde61ffcac482f4a97a34c2d444f15b_JaffaCakes118

    • Size

      313KB

    • MD5

      8cde61ffcac482f4a97a34c2d444f15b

    • SHA1

      e33ed26ab51e54c94a8a7bf66483c9b1323c6385

    • SHA256

      ff2b44f7d700797f6e7b406985d6e352a0ca1088b9a5c80aa73a77e50708c658

    • SHA512

      9a99c2a63bbcf5bc56ee1cf88c8f6d108fc6d1c12ba14cd6b2e7706fb12332855617f107986c20b198d8942a13687e28b1bb9e9412ada6836d52a4bfc357f37f

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sub/dvzf6KyGYTRCiYWkz:91OgLdaJ/tA8iYfz

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks