General

  • Target

    0c2b9bbadcca87a158a34ad296af799f_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241002-x78wfawfrd

  • MD5

    0c2b9bbadcca87a158a34ad296af799f

  • SHA1

    1b0adee8a6f6e09fda8126a21e78fd2bce11860f

  • SHA256

    bb83557f3a7bf677e3505137515deb47979bdddd37ed32ab21a14600b7902196

  • SHA512

    503196a82e3a60569c8c1b0be260613a34b27b3284d9f750a7e95bea3e59b055bac9393ae877ec39a5faa877444e3311aa743e159b2a45909a1d4cf92e645fdf

  • SSDEEP

    24576:PLia0QuVt5lMNPYA9edschvc8TiqqTbhkR4bDUunSPe:PLBxufMNPYA94k8Ti5hlbxSPe

Malware Config

Targets

    • Target

      0c2b9bbadcca87a158a34ad296af799f_JaffaCakes118

    • Size

      1.0MB

    • MD5

      0c2b9bbadcca87a158a34ad296af799f

    • SHA1

      1b0adee8a6f6e09fda8126a21e78fd2bce11860f

    • SHA256

      bb83557f3a7bf677e3505137515deb47979bdddd37ed32ab21a14600b7902196

    • SHA512

      503196a82e3a60569c8c1b0be260613a34b27b3284d9f750a7e95bea3e59b055bac9393ae877ec39a5faa877444e3311aa743e159b2a45909a1d4cf92e645fdf

    • SSDEEP

      24576:PLia0QuVt5lMNPYA9edschvc8TiqqTbhkR4bDUunSPe:PLBxufMNPYA94k8Ti5hlbxSPe

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks