General

  • Target

    de4e31e9076caf8f1645289d800cd7eb_JaffaCakes118

  • Size

    252KB

  • Sample

    240913-pt3hha1cql

  • MD5

    de4e31e9076caf8f1645289d800cd7eb

  • SHA1

    922840cfcb7ddf08bc2a563661b001b5096692af

  • SHA256

    d5cb19e8cbd1fa8feeb383a2ea9a929bd1925864ef0ec8c3a8157ec7f912b336

  • SHA512

    195f0dd0fa5d750dfeb80733238b3f5203b17e2cbb2df14ddde9aa9da95d9007b785537670f791ed412e01583a90b3c10da828fe28a9d40adf652ae6cab953d7

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s04zQ7RSKp7HLi589ikKtC:91OgLdamE/7HLu89ikZ

Malware Config

Targets

    • Target

      de4e31e9076caf8f1645289d800cd7eb_JaffaCakes118

    • Size

      252KB

    • MD5

      de4e31e9076caf8f1645289d800cd7eb

    • SHA1

      922840cfcb7ddf08bc2a563661b001b5096692af

    • SHA256

      d5cb19e8cbd1fa8feeb383a2ea9a929bd1925864ef0ec8c3a8157ec7f912b336

    • SHA512

      195f0dd0fa5d750dfeb80733238b3f5203b17e2cbb2df14ddde9aa9da95d9007b785537670f791ed412e01583a90b3c10da828fe28a9d40adf652ae6cab953d7

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s04zQ7RSKp7HLi589ikKtC:91OgLdamE/7HLu89ikZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks