General

  • Target

    df5039b8b15831611e6a4df66bbd7f1b_JaffaCakes118

  • Size

    257KB

  • Sample

    240914-crdp5ssakq

  • MD5

    df5039b8b15831611e6a4df66bbd7f1b

  • SHA1

    b0643896cb4b545e663a21cfaef443d40d8a4e8a

  • SHA256

    2acd23202ad4dc3bc2473b6fb20e132a0acba4c6ac4fadc80b0e6cd33a6c2d98

  • SHA512

    e880d6318ac51b0115c41194f855a55d99f4415878d5247fe674e5e0bd710c53252e6bc65216fe3cd839d924eaf8ac02ac5868e490e004b0903288cc1e10e942

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sK7GfWX6tekG0BS6fzdX5pSre:91OgLdaZ6f0WS67dXvIe

Malware Config

Targets

    • Target

      df5039b8b15831611e6a4df66bbd7f1b_JaffaCakes118

    • Size

      257KB

    • MD5

      df5039b8b15831611e6a4df66bbd7f1b

    • SHA1

      b0643896cb4b545e663a21cfaef443d40d8a4e8a

    • SHA256

      2acd23202ad4dc3bc2473b6fb20e132a0acba4c6ac4fadc80b0e6cd33a6c2d98

    • SHA512

      e880d6318ac51b0115c41194f855a55d99f4415878d5247fe674e5e0bd710c53252e6bc65216fe3cd839d924eaf8ac02ac5868e490e004b0903288cc1e10e942

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sK7GfWX6tekG0BS6fzdX5pSre:91OgLdaZ6f0WS67dXvIe

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks