General

  • Target

    3a95ed688f57c0106e410ec4d0f09cce_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241012-r5njtswbkb

  • MD5

    3a95ed688f57c0106e410ec4d0f09cce

  • SHA1

    e82968e7435e9459e3abae24b7369af5c75cf6b5

  • SHA256

    b89ae15df3aa2602c7dd145557a7efab38a8d6759cecdf1cb8efe74918edff82

  • SHA512

    e75fe2d5c9dd754f3e200d005e4d1e99837f06c644b9004f2249feb9b4edc9c36db54b6693ac2ea4480b75ca816bc209b18e28533b9103c1c16e0652b1cdf487

  • SSDEEP

    24576:h1OYdaOtOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQf:h1OsSOEt5hDG0SAMs9j8nTJ2Y68hWGQf

Malware Config

Targets

    • Target

      3a95ed688f57c0106e410ec4d0f09cce_JaffaCakes118

    • Size

      1.1MB

    • MD5

      3a95ed688f57c0106e410ec4d0f09cce

    • SHA1

      e82968e7435e9459e3abae24b7369af5c75cf6b5

    • SHA256

      b89ae15df3aa2602c7dd145557a7efab38a8d6759cecdf1cb8efe74918edff82

    • SHA512

      e75fe2d5c9dd754f3e200d005e4d1e99837f06c644b9004f2249feb9b4edc9c36db54b6693ac2ea4480b75ca816bc209b18e28533b9103c1c16e0652b1cdf487

    • SSDEEP

      24576:h1OYdaOtOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQf:h1OsSOEt5hDG0SAMs9j8nTJ2Y68hWGQf

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks