General

  • Target

    26fc489f9e882f3725bf9954181b243f_JaffaCakes118

  • Size

    313KB

  • Sample

    241008-3c1t8ssblg

  • MD5

    26fc489f9e882f3725bf9954181b243f

  • SHA1

    2061a1d17176c972a744f392b23f7106b9901ea1

  • SHA256

    e084e01b9bafb6dd48dc0a0375e43b6eda18e45784ad2dc18a554a34b6bca63d

  • SHA512

    cccbed865f64b9f278e80123c67b39973d0dd103987fd2764cab2a6a2e0282c3c86f2d063e937307c9d6355a2e9263c3273677fea0fc147d10988ede29b923fc

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sxAGuzKTVwk4Ayv4+7W391OG:91OgLdaz0VwkZF+7Y3

Malware Config

Targets

    • Target

      26fc489f9e882f3725bf9954181b243f_JaffaCakes118

    • Size

      313KB

    • MD5

      26fc489f9e882f3725bf9954181b243f

    • SHA1

      2061a1d17176c972a744f392b23f7106b9901ea1

    • SHA256

      e084e01b9bafb6dd48dc0a0375e43b6eda18e45784ad2dc18a554a34b6bca63d

    • SHA512

      cccbed865f64b9f278e80123c67b39973d0dd103987fd2764cab2a6a2e0282c3c86f2d063e937307c9d6355a2e9263c3273677fea0fc147d10988ede29b923fc

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sxAGuzKTVwk4Ayv4+7W391OG:91OgLdaz0VwkZF+7Y3

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks