General

  • Target

    39b3a31d66c7b800c6cb8f7761e2f86b_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241012-nbj3rsxdrh

  • MD5

    39b3a31d66c7b800c6cb8f7761e2f86b

  • SHA1

    06d78bbec2f5d0cd077599b985f40c11a16d4713

  • SHA256

    034dd07905b708a9f4a29053799f4aa9d0a4a0dee7acda9d7db2c2bca1b798d2

  • SHA512

    54fa76b0f04d14559fe2b9375d3cda0ca72af6f9841240771c184c79dc084b9082608b10e4a372ff88a9ed1460280fbf96e25d948ce941012867c72c9623b0c0

  • SSDEEP

    24576:4LiW2GiQUhNM/WbvGhApkb3yNP5iUIyUhUvwfjpK:4LV2GfUrM+jGhifPgUIyiU4LpK

Malware Config

Targets

    • Target

      39b3a31d66c7b800c6cb8f7761e2f86b_JaffaCakes118

    • Size

      1.0MB

    • MD5

      39b3a31d66c7b800c6cb8f7761e2f86b

    • SHA1

      06d78bbec2f5d0cd077599b985f40c11a16d4713

    • SHA256

      034dd07905b708a9f4a29053799f4aa9d0a4a0dee7acda9d7db2c2bca1b798d2

    • SHA512

      54fa76b0f04d14559fe2b9375d3cda0ca72af6f9841240771c184c79dc084b9082608b10e4a372ff88a9ed1460280fbf96e25d948ce941012867c72c9623b0c0

    • SSDEEP

      24576:4LiW2GiQUhNM/WbvGhApkb3yNP5iUIyUhUvwfjpK:4LV2GfUrM+jGhifPgUIyiU4LpK

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks