General

  • Target

    011196b40ed594373d40e3fc114b39f3_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240930-nh4ezsselk

  • MD5

    011196b40ed594373d40e3fc114b39f3

  • SHA1

    ed0c8fe96e9b2cb2510c4ded3319b5cd6db20e48

  • SHA256

    8178910c727bc27b09aeda89f7ad6e8b90ae9b5b0f507353210e7f4c4bb18e4e

  • SHA512

    97195c82d1f908e545d92ccadae883a07acf6b8f825a06ef1b3b1a1f3260dafb43b0b9c44e2a9d6a9202c69ed48bfdc640a2d9738976415428bfbcdac8217f8f

  • SSDEEP

    24576:4Li/uj5LHuKWHwRe2Rb9OSeU9yw3GfaRoZTrH5z:4LmujxT/e2l9/eU9tWSRoBrHl

Malware Config

Targets

    • Target

      011196b40ed594373d40e3fc114b39f3_JaffaCakes118

    • Size

      1.0MB

    • MD5

      011196b40ed594373d40e3fc114b39f3

    • SHA1

      ed0c8fe96e9b2cb2510c4ded3319b5cd6db20e48

    • SHA256

      8178910c727bc27b09aeda89f7ad6e8b90ae9b5b0f507353210e7f4c4bb18e4e

    • SHA512

      97195c82d1f908e545d92ccadae883a07acf6b8f825a06ef1b3b1a1f3260dafb43b0b9c44e2a9d6a9202c69ed48bfdc640a2d9738976415428bfbcdac8217f8f

    • SSDEEP

      24576:4Li/uj5LHuKWHwRe2Rb9OSeU9yw3GfaRoZTrH5z:4LmujxT/e2l9/eU9tWSRoBrHl

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks