General

  • Target

    254857c8aa02223b603fde1f1d17bf74_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241008-znkevayhlf

  • MD5

    254857c8aa02223b603fde1f1d17bf74

  • SHA1

    e2cfba82f150034906fa43935917bc724ba0260d

  • SHA256

    55008db449e45e8684bfa3190960cac5f53fdff2d2b20577d9a7e86fe5d4d024

  • SHA512

    df9f3eaaaff7662f171fca0dbe78a58e6f4a6a4c6b7683633a2e0944b1abbd9c9be946de758321bddd0c4a2166882a008389af04f39669d02d074b8d06e13b18

  • SSDEEP

    24576:zxllVmuE1SQXKHwyZM1iL+Ag8VkYd7tamWyMJd:zxJ+1RI/Mi8yklmWbJd

Malware Config

Targets

    • Target

      254857c8aa02223b603fde1f1d17bf74_JaffaCakes118

    • Size

      1.1MB

    • MD5

      254857c8aa02223b603fde1f1d17bf74

    • SHA1

      e2cfba82f150034906fa43935917bc724ba0260d

    • SHA256

      55008db449e45e8684bfa3190960cac5f53fdff2d2b20577d9a7e86fe5d4d024

    • SHA512

      df9f3eaaaff7662f171fca0dbe78a58e6f4a6a4c6b7683633a2e0944b1abbd9c9be946de758321bddd0c4a2166882a008389af04f39669d02d074b8d06e13b18

    • SSDEEP

      24576:zxllVmuE1SQXKHwyZM1iL+Ag8VkYd7tamWyMJd:zxJ+1RI/Mi8yklmWbJd

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks