General

  • Target

    3c2abc124f0a9d1b3743691b92bafd42_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241012-1jxp2sxblp

  • MD5

    3c2abc124f0a9d1b3743691b92bafd42

  • SHA1

    30e4ed3898a0df4c2dffc6749ddbfa78603d5a37

  • SHA256

    ae75fbccdd304b5c5216fa063b5ba019535af43670b7bbdb11634adc506f9e11

  • SHA512

    484fd1caa94ddb5333e0350a59e0c9fbb8e46c7fcf4c4fea2c4b3f54a5ac7c4692529d98482ac36806fcb1df2f8b3453b517507d094a7584df7ed665f2549be7

  • SSDEEP

    24576:4Li7mUHXMvRVtJwt/GYle0bjwPaKuRVzrGneLNGpn5X01qEk:4LNU2VtJwt/he0VSneGn5X0MEk

Malware Config

Targets

    • Target

      3c2abc124f0a9d1b3743691b92bafd42_JaffaCakes118

    • Size

      1.0MB

    • MD5

      3c2abc124f0a9d1b3743691b92bafd42

    • SHA1

      30e4ed3898a0df4c2dffc6749ddbfa78603d5a37

    • SHA256

      ae75fbccdd304b5c5216fa063b5ba019535af43670b7bbdb11634adc506f9e11

    • SHA512

      484fd1caa94ddb5333e0350a59e0c9fbb8e46c7fcf4c4fea2c4b3f54a5ac7c4692529d98482ac36806fcb1df2f8b3453b517507d094a7584df7ed665f2549be7

    • SSDEEP

      24576:4Li7mUHXMvRVtJwt/GYle0bjwPaKuRVzrGneLNGpn5X01qEk:4LNU2VtJwt/he0VSneGn5X0MEk

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks