General

  • Target

    091eb440eea5772dd70e74cc87a8fca1_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241002-f8kfsszblj

  • MD5

    091eb440eea5772dd70e74cc87a8fca1

  • SHA1

    3719dda2a31fb1798bd30187d053396233eb641f

  • SHA256

    18993246f5b0524f4280abfcf85431a551b04cc1e12e652d56afc289c6060e0d

  • SHA512

    1a27a331859bd3dbb0d9e790950cd1658e83a10fdfa7f6b58eaa13374e4a2ba44a04b70cf58152f2a6a39d9e5059177fcb36399e0d8422ed4808fbd93966392f

  • SSDEEP

    24576:h1OYdaOqOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQG:h1Os3OEt5hDG0SAMs9j8nTJ2Y68hWGQG

Malware Config

Targets

    • Target

      091eb440eea5772dd70e74cc87a8fca1_JaffaCakes118

    • Size

      1.1MB

    • MD5

      091eb440eea5772dd70e74cc87a8fca1

    • SHA1

      3719dda2a31fb1798bd30187d053396233eb641f

    • SHA256

      18993246f5b0524f4280abfcf85431a551b04cc1e12e652d56afc289c6060e0d

    • SHA512

      1a27a331859bd3dbb0d9e790950cd1658e83a10fdfa7f6b58eaa13374e4a2ba44a04b70cf58152f2a6a39d9e5059177fcb36399e0d8422ed4808fbd93966392f

    • SSDEEP

      24576:h1OYdaOqOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQG:h1Os3OEt5hDG0SAMs9j8nTJ2Y68hWGQG

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks