General

  • Target

    de9982786c92ba69f98145a7ff065e50_JaffaCakes118

  • Size

    313KB

  • Sample

    240913-wc8rhszbpq

  • MD5

    de9982786c92ba69f98145a7ff065e50

  • SHA1

    3aa66d354410dc5a45d50d7b0ecf685d07e8a499

  • SHA256

    e08304b87cffdc8bd60c5f9172479a9ecafd1b134732d9bada046866c59e1bda

  • SHA512

    20ec64777724635874c537ee54d2e092b2aba852e36988dedc4b3007e6508c2564a7da9d2c76d4310353264ff2e1a42ad3b1d5e2099d6ea846310e972ca7dd41

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4skvU26CFQNGklc2Hdbakl2SaRMaWc6309:91OgLdai26zDJLU/RHhL

Malware Config

Targets

    • Target

      de9982786c92ba69f98145a7ff065e50_JaffaCakes118

    • Size

      313KB

    • MD5

      de9982786c92ba69f98145a7ff065e50

    • SHA1

      3aa66d354410dc5a45d50d7b0ecf685d07e8a499

    • SHA256

      e08304b87cffdc8bd60c5f9172479a9ecafd1b134732d9bada046866c59e1bda

    • SHA512

      20ec64777724635874c537ee54d2e092b2aba852e36988dedc4b3007e6508c2564a7da9d2c76d4310353264ff2e1a42ad3b1d5e2099d6ea846310e972ca7dd41

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4skvU26CFQNGklc2Hdbakl2SaRMaWc6309:91OgLdai26zDJLU/RHhL

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks