General

  • Target

    083492a11344cfed714541184b77c1b7_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241002-blr5xazcmq

  • MD5

    083492a11344cfed714541184b77c1b7

  • SHA1

    95754b08c2f1ebc5f7147bbc6582e3425ff685ed

  • SHA256

    b502e2fbcd5fd0ed0f3969dc7ca8f72d42a000eb42e58d6c6dc3c3f40de0252b

  • SHA512

    e6395f3bcf5b94cde8c9728191bda34e6d3b177a247d6c947e1a9f598e9871a72ced6ae8e6d209268245faef4722f6191d529ab5ba458d1e303ed1044597912b

  • SSDEEP

    24576:6xllVmuE1SaAza3EQcGxCS2HcF2CqnRDFt8fsoLkqqzn+1tya:6xJ+1UOJcGxC3b3oL/3zP

Malware Config

Targets

    • Target

      083492a11344cfed714541184b77c1b7_JaffaCakes118

    • Size

      1.1MB

    • MD5

      083492a11344cfed714541184b77c1b7

    • SHA1

      95754b08c2f1ebc5f7147bbc6582e3425ff685ed

    • SHA256

      b502e2fbcd5fd0ed0f3969dc7ca8f72d42a000eb42e58d6c6dc3c3f40de0252b

    • SHA512

      e6395f3bcf5b94cde8c9728191bda34e6d3b177a247d6c947e1a9f598e9871a72ced6ae8e6d209268245faef4722f6191d529ab5ba458d1e303ed1044597912b

    • SSDEEP

      24576:6xllVmuE1SaAza3EQcGxCS2HcF2CqnRDFt8fsoLkqqzn+1tya:6xJ+1UOJcGxC3b3oL/3zP

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks