General

  • Target

    dc7460db68ab9edf7ea36d35585c411a_JaffaCakes118

  • Size

    798KB

  • Sample

    240912-r76s7azdjc

  • MD5

    dc7460db68ab9edf7ea36d35585c411a

  • SHA1

    f44e33376f2a5ea3966c201b373549cc7df3f9d3

  • SHA256

    b53ca4fb375cbf8bdf915f73fa33fc9d754d61dfedc401c3ceec63b829ffa260

  • SHA512

    a2f5fd75bb29d83b8cfe2b69af730ce77882f354288846fa03aee74052ce9447ba614a86eec956af70f1595291f044098ecad3cfa1584284d67354b8cca13895

  • SSDEEP

    12288:qttVdNyDrdcC6B43isByH4No4/WCp0fLDYlT2rBPOzYU8nFZiZ5DA1r:qfV/yDrvt3iayHaOCKTFWkVsQ1

Malware Config

Targets

    • Target

      dc7460db68ab9edf7ea36d35585c411a_JaffaCakes118

    • Size

      798KB

    • MD5

      dc7460db68ab9edf7ea36d35585c411a

    • SHA1

      f44e33376f2a5ea3966c201b373549cc7df3f9d3

    • SHA256

      b53ca4fb375cbf8bdf915f73fa33fc9d754d61dfedc401c3ceec63b829ffa260

    • SHA512

      a2f5fd75bb29d83b8cfe2b69af730ce77882f354288846fa03aee74052ce9447ba614a86eec956af70f1595291f044098ecad3cfa1584284d67354b8cca13895

    • SSDEEP

      12288:qttVdNyDrdcC6B43isByH4No4/WCp0fLDYlT2rBPOzYU8nFZiZ5DA1r:qfV/yDrvt3iayHaOCKTFWkVsQ1

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks