General

  • Target

    17f6f476327d4d9a3f0595f0d8f34b58_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241006-nzv5yaxaje

  • MD5

    17f6f476327d4d9a3f0595f0d8f34b58

  • SHA1

    84bc77e2ecfcd7c2017baf8a02e68cbacdfbe492

  • SHA256

    f696ffa1c95c6df688d58724d46a50c52fd0c2313c2307b1ba79878fa9645d2d

  • SHA512

    126051e56aa89f50e44d27d99a8eac4bc7a31a11ed224396c2e9a691d62f26abfb7f941e65eeb38dbc9d7dca0173a461bfc7d829494a65ed9ee017fcde4e8c49

  • SSDEEP

    24576:5LiCyORdbmYsxUC0O7vHJQU6po/gFm+WPCg:5Lhdb6B0KHJOpocm+WF

Malware Config

Targets

    • Target

      17f6f476327d4d9a3f0595f0d8f34b58_JaffaCakes118

    • Size

      1.0MB

    • MD5

      17f6f476327d4d9a3f0595f0d8f34b58

    • SHA1

      84bc77e2ecfcd7c2017baf8a02e68cbacdfbe492

    • SHA256

      f696ffa1c95c6df688d58724d46a50c52fd0c2313c2307b1ba79878fa9645d2d

    • SHA512

      126051e56aa89f50e44d27d99a8eac4bc7a31a11ed224396c2e9a691d62f26abfb7f941e65eeb38dbc9d7dca0173a461bfc7d829494a65ed9ee017fcde4e8c49

    • SSDEEP

      24576:5LiCyORdbmYsxUC0O7vHJQU6po/gFm+WPCg:5Lhdb6B0KHJOpocm+WF

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks