General

  • Target

    1786fe0c152f74b2e273b5bd02c80a9b_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241005-np4z4awhkc

  • MD5

    1786fe0c152f74b2e273b5bd02c80a9b

  • SHA1

    aa5c3e317899f0afc0a1f0263cb19f822c0d772f

  • SHA256

    2ad3f51eb9d5b3b14ea7031b15780f6058b52690d185649fabcab3c922ff0703

  • SHA512

    893663d85a1960778b9bd36705d12ba6de4082c2484300624d9100c62ffb5c5ec4105ebbf626956240e066d2f617da856377235e4fdaf99e0b0af28aba17cf28

  • SSDEEP

    24576:PLiOBPQyTa8He8IQsYJqQFZwmEfWXEjI8+iZwu+TX:PL1BACeB1GFZfEfNjIS+TX

Malware Config

Targets

    • Target

      1786fe0c152f74b2e273b5bd02c80a9b_JaffaCakes118

    • Size

      1.0MB

    • MD5

      1786fe0c152f74b2e273b5bd02c80a9b

    • SHA1

      aa5c3e317899f0afc0a1f0263cb19f822c0d772f

    • SHA256

      2ad3f51eb9d5b3b14ea7031b15780f6058b52690d185649fabcab3c922ff0703

    • SHA512

      893663d85a1960778b9bd36705d12ba6de4082c2484300624d9100c62ffb5c5ec4105ebbf626956240e066d2f617da856377235e4fdaf99e0b0af28aba17cf28

    • SSDEEP

      24576:PLiOBPQyTa8He8IQsYJqQFZwmEfWXEjI8+iZwu+TX:PL1BACeB1GFZfEfNjIS+TX

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks