General

  • Target

    ff774242805a1041aa0dd3228be69aa4_JaffaCakes118

  • Size

    313KB

  • Sample

    240929-25y1nsygje

  • MD5

    ff774242805a1041aa0dd3228be69aa4

  • SHA1

    2bfc9284709bed41ec9fa0dfff3120f51eff71f5

  • SHA256

    4de8fb160b2e41adf42fbfbc231416c7fd9869540d90abf3b3e7babd5d3bc1b5

  • SHA512

    22cb29299a8bbf57b424f60e55a0d9a35520f059587861cd7a3c1db4c371826f50f37e20fdd775601671272683ee06a7927e7ca6292cd45fe41ac6e367009576

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4szA3ImRl18UjxSAoW9muaZO1zNdD1h58ZfWRSh+D:91OgLda8wImOU1AW9mq1zNfh58Ziqu

Malware Config

Targets

    • Target

      ff774242805a1041aa0dd3228be69aa4_JaffaCakes118

    • Size

      313KB

    • MD5

      ff774242805a1041aa0dd3228be69aa4

    • SHA1

      2bfc9284709bed41ec9fa0dfff3120f51eff71f5

    • SHA256

      4de8fb160b2e41adf42fbfbc231416c7fd9869540d90abf3b3e7babd5d3bc1b5

    • SHA512

      22cb29299a8bbf57b424f60e55a0d9a35520f059587861cd7a3c1db4c371826f50f37e20fdd775601671272683ee06a7927e7ca6292cd45fe41ac6e367009576

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4szA3ImRl18UjxSAoW9muaZO1zNdD1h58ZfWRSh+D:91OgLda8wImOU1AW9mq1zNfh58Ziqu

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks