General

  • Target

    0224369592dae7c2871986c5957bcb6c_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240930-tbzq4stclj

  • MD5

    0224369592dae7c2871986c5957bcb6c

  • SHA1

    7427778c8eed154d5e805587f9a1301c27b6f073

  • SHA256

    2b1b647a3095edb4076caf93ba45afb2da207de78e0db3512cf7919877deb759

  • SHA512

    347c307a39d460b860cee21f31c1b9b4d1285ef041b44f130384457320d21e3fafcb0bca2c3dca6501106454cc6b13df4dba9d7d66c4366b605e05e6b8d3a2a8

  • SSDEEP

    24576:4LiHnj/B0rT9OWMgqMn1oVwCeD/kcQwDpwTBi/:4LqTB0rBOTVMn1oVwCeDccdpyBi/

Malware Config

Targets

    • Target

      0224369592dae7c2871986c5957bcb6c_JaffaCakes118

    • Size

      1.0MB

    • MD5

      0224369592dae7c2871986c5957bcb6c

    • SHA1

      7427778c8eed154d5e805587f9a1301c27b6f073

    • SHA256

      2b1b647a3095edb4076caf93ba45afb2da207de78e0db3512cf7919877deb759

    • SHA512

      347c307a39d460b860cee21f31c1b9b4d1285ef041b44f130384457320d21e3fafcb0bca2c3dca6501106454cc6b13df4dba9d7d66c4366b605e05e6b8d3a2a8

    • SSDEEP

      24576:4LiHnj/B0rT9OWMgqMn1oVwCeD/kcQwDpwTBi/:4LqTB0rBOTVMn1oVwCeDccdpyBi/

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks