General

  • Target

    1772460bc3c7bdd4aa3d67fa428e45df_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241005-m989wa1elr

  • MD5

    1772460bc3c7bdd4aa3d67fa428e45df

  • SHA1

    b916a2a23e6d70b68d16576e39a895114ded12b6

  • SHA256

    54575a43cc5895f1abf9b8056a99091a11cccf838deaa78adc4aff122ac9afb0

  • SHA512

    e8a72ea63f3d9601b2056f50ebc467815af8d5d29462ae78f20f4cb8a560fd371c5a40c8e117dd707723375065f531ee71d06f09df679b9fc9b3c0fad8da5efe

  • SSDEEP

    24576:4LiebphidcvNcQfLjVwFBjZ5kWZW0IdLE+eQlmh92K:4Lvbj5vmQLjVMZzdIv4

Malware Config

Targets

    • Target

      1772460bc3c7bdd4aa3d67fa428e45df_JaffaCakes118

    • Size

      1.0MB

    • MD5

      1772460bc3c7bdd4aa3d67fa428e45df

    • SHA1

      b916a2a23e6d70b68d16576e39a895114ded12b6

    • SHA256

      54575a43cc5895f1abf9b8056a99091a11cccf838deaa78adc4aff122ac9afb0

    • SHA512

      e8a72ea63f3d9601b2056f50ebc467815af8d5d29462ae78f20f4cb8a560fd371c5a40c8e117dd707723375065f531ee71d06f09df679b9fc9b3c0fad8da5efe

    • SSDEEP

      24576:4LiebphidcvNcQfLjVwFBjZ5kWZW0IdLE+eQlmh92K:4Lvbj5vmQLjVMZzdIv4

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks