General

  • Target

    24ec9e70cbfac71a13a676635cd0a110_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241008-y432fssfkp

  • MD5

    24ec9e70cbfac71a13a676635cd0a110

  • SHA1

    cd4fbde45581816ca242c82970d541221c12a2c4

  • SHA256

    70c49368cf352afc88b57864314187a7e4dc98be9bf9e4c07c80f55d823bd008

  • SHA512

    3ba1dabbe0002d95796f0b08a2061ef9736f53a4c988a68b5b06bfc0548ebff87e4463fa848533b358075f861b2172894026af230bcc2a51851c6cc5bd66e661

  • SSDEEP

    24576:tLiaUzBssx+sNlmc0UPIXDSEo+ipVGUywC6pscOcVb:tL3FOfzP1+CVGUywFhp

Malware Config

Targets

    • Target

      24ec9e70cbfac71a13a676635cd0a110_JaffaCakes118

    • Size

      1.0MB

    • MD5

      24ec9e70cbfac71a13a676635cd0a110

    • SHA1

      cd4fbde45581816ca242c82970d541221c12a2c4

    • SHA256

      70c49368cf352afc88b57864314187a7e4dc98be9bf9e4c07c80f55d823bd008

    • SHA512

      3ba1dabbe0002d95796f0b08a2061ef9736f53a4c988a68b5b06bfc0548ebff87e4463fa848533b358075f861b2172894026af230bcc2a51851c6cc5bd66e661

    • SSDEEP

      24576:tLiaUzBssx+sNlmc0UPIXDSEo+ipVGUywC6pscOcVb:tL3FOfzP1+CVGUywFhp

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks