General

  • Target

    a5c87f5fa0437ee2ba4ceacf1e81a562_JaffaCakes118

  • Size

    315KB

  • Sample

    240818-hkelra1dqf

  • MD5

    a5c87f5fa0437ee2ba4ceacf1e81a562

  • SHA1

    92a516edf1b1068df6f34a6fbd33f4bd460463dc

  • SHA256

    1282fac10c6b1fbc0776fa8526960e5cf4e4707e36b2d4147407195f47566f5d

  • SHA512

    da373646049ca875b13c9e1e84a1dcd59391529e4bd46bf3f6e6f718cce9ee38a99332f32ac37f997d184deed5c2523cdb335c88762f3f9a068ce8e2af01e596

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sdOat8ob20n4brI+Jxhj6zbrPf+4hjM:91OgLda2tzV4brI+DGbrfFq

Malware Config

Targets

    • Target

      a5c87f5fa0437ee2ba4ceacf1e81a562_JaffaCakes118

    • Size

      315KB

    • MD5

      a5c87f5fa0437ee2ba4ceacf1e81a562

    • SHA1

      92a516edf1b1068df6f34a6fbd33f4bd460463dc

    • SHA256

      1282fac10c6b1fbc0776fa8526960e5cf4e4707e36b2d4147407195f47566f5d

    • SHA512

      da373646049ca875b13c9e1e84a1dcd59391529e4bd46bf3f6e6f718cce9ee38a99332f32ac37f997d184deed5c2523cdb335c88762f3f9a068ce8e2af01e596

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sdOat8ob20n4brI+Jxhj6zbrPf+4hjM:91OgLda2tzV4brI+DGbrfFq

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks