General

  • Target

    0a46510cbfb99c43a9f18f5e61e6b1ec_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241002-mtkatasajj

  • MD5

    0a46510cbfb99c43a9f18f5e61e6b1ec

  • SHA1

    5b4527332e39d7d656a0f82cb90e9231f0eaa36a

  • SHA256

    30b5ea76ee30a51f45811cd15035390e3ee2ec9ec746122a7541995d9c7b43a4

  • SHA512

    7ee270dedc34fd6e56566cbbe1029505523551018e6033b039aa1ba2c7da96172437a2ae6bfd659bbbcd44e606a4463421b47442df62f192c4ba751759e7e15e

  • SSDEEP

    24576:4LiXcFuyyicVf7XtZIA6rYtiR1CkXhNqR2o:4LQcDyiChZIrrY0CcXRo

Malware Config

Targets

    • Target

      0a46510cbfb99c43a9f18f5e61e6b1ec_JaffaCakes118

    • Size

      1.0MB

    • MD5

      0a46510cbfb99c43a9f18f5e61e6b1ec

    • SHA1

      5b4527332e39d7d656a0f82cb90e9231f0eaa36a

    • SHA256

      30b5ea76ee30a51f45811cd15035390e3ee2ec9ec746122a7541995d9c7b43a4

    • SHA512

      7ee270dedc34fd6e56566cbbe1029505523551018e6033b039aa1ba2c7da96172437a2ae6bfd659bbbcd44e606a4463421b47442df62f192c4ba751759e7e15e

    • SSDEEP

      24576:4LiXcFuyyicVf7XtZIA6rYtiR1CkXhNqR2o:4LQcDyiChZIrrY0CcXRo

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks