General

  • Target

    262c62c751bb83d69f84c1fd2460eb72_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241008-119e6s1hnp

  • MD5

    262c62c751bb83d69f84c1fd2460eb72

  • SHA1

    bb94594f2c3bb8aaad8302b4d63dfa31d540ad9e

  • SHA256

    9e58564483a228c5c79963435529aee6eaaad7e19faea4c84628bf7ef09cae94

  • SHA512

    1f1790a320d7ef9f3a3261791bd9ac8c3f9f8607dae7177dedf444c910cbc3da49d3daed064203883cf9e5c087907f9085cd9074bb33fd9ac63973f0f9c412f8

  • SSDEEP

    24576:4LiD+Y8jLyJ4dAgfJIHpDJ/EGNjdV+fJyxs2h6N1ArnQ39Ai:4L6+2OdvfJIHpDW43+fOs2YNy7e3

Malware Config

Targets

    • Target

      262c62c751bb83d69f84c1fd2460eb72_JaffaCakes118

    • Size

      1.0MB

    • MD5

      262c62c751bb83d69f84c1fd2460eb72

    • SHA1

      bb94594f2c3bb8aaad8302b4d63dfa31d540ad9e

    • SHA256

      9e58564483a228c5c79963435529aee6eaaad7e19faea4c84628bf7ef09cae94

    • SHA512

      1f1790a320d7ef9f3a3261791bd9ac8c3f9f8607dae7177dedf444c910cbc3da49d3daed064203883cf9e5c087907f9085cd9074bb33fd9ac63973f0f9c412f8

    • SSDEEP

      24576:4LiD+Y8jLyJ4dAgfJIHpDJ/EGNjdV+fJyxs2h6N1ArnQ39Ai:4L6+2OdvfJIHpDW43+fOs2YNy7e3

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks