General

  • Target

    01e33282fe29a9c8ea8b14758169dad3_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240930-r5ddvs1bnr

  • MD5

    01e33282fe29a9c8ea8b14758169dad3

  • SHA1

    9fc645ea68872721ce1f60cbd703f6c72011711c

  • SHA256

    64ebd2a5acb3c5c8379babd96d53751fcecc30962de0cf865b88d7ddcaa855b8

  • SHA512

    a49f91c2e6da935d82ab5b7a9db0d739b3b93a879d4ee80ed30188d6b2a70b25b76c1095e258b7d2a32bafce34aea082e2c5ac6d37777f9b9530d4a3ac0057fd

  • SSDEEP

    24576:4Lik9q0mFzX/0PiAPIA9HYTLEtPGQU6R5ceuHYIHnOM/3:4LVJmVnAPIA8LbhoTCnT3

Malware Config

Targets

    • Target

      01e33282fe29a9c8ea8b14758169dad3_JaffaCakes118

    • Size

      1.0MB

    • MD5

      01e33282fe29a9c8ea8b14758169dad3

    • SHA1

      9fc645ea68872721ce1f60cbd703f6c72011711c

    • SHA256

      64ebd2a5acb3c5c8379babd96d53751fcecc30962de0cf865b88d7ddcaa855b8

    • SHA512

      a49f91c2e6da935d82ab5b7a9db0d739b3b93a879d4ee80ed30188d6b2a70b25b76c1095e258b7d2a32bafce34aea082e2c5ac6d37777f9b9530d4a3ac0057fd

    • SSDEEP

      24576:4Lik9q0mFzX/0PiAPIA9HYTLEtPGQU6R5ceuHYIHnOM/3:4LVJmVnAPIA8LbhoTCnT3

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks