General

  • Target

    30125fb59bc13c0ef4773c5869eefbe8_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241010-qmb8eaxdpc

  • MD5

    30125fb59bc13c0ef4773c5869eefbe8

  • SHA1

    4ae78d164cbbcf5354234accb8fcd97d22b248f5

  • SHA256

    8a6669114cd42935d941c73249c716282fe24acff689ef66e45f250025437de2

  • SHA512

    30f49f178b03090132d2f61a2021b29fd89d4d6a617585a752c9667f12659bf80191304de24a5a87d0e4d619f662f70d5320ad27308c6a8ca0d9a3039d6d0344

  • SSDEEP

    24576:4Lii2hbsQ81wrVTbgTEWGoNadlJZMSw/tBoCN:4Ln2hol1SVTIEqwdlrbw/tpN

Malware Config

Targets

    • Target

      30125fb59bc13c0ef4773c5869eefbe8_JaffaCakes118

    • Size

      1.0MB

    • MD5

      30125fb59bc13c0ef4773c5869eefbe8

    • SHA1

      4ae78d164cbbcf5354234accb8fcd97d22b248f5

    • SHA256

      8a6669114cd42935d941c73249c716282fe24acff689ef66e45f250025437de2

    • SHA512

      30f49f178b03090132d2f61a2021b29fd89d4d6a617585a752c9667f12659bf80191304de24a5a87d0e4d619f662f70d5320ad27308c6a8ca0d9a3039d6d0344

    • SSDEEP

      24576:4Lii2hbsQ81wrVTbgTEWGoNadlJZMSw/tBoCN:4Ln2hol1SVTIEqwdlrbw/tpN

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks