General

  • Target

    3bd1a8d5e167c562533e129903a0e625_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241012-ys2dgstaqn

  • MD5

    3bd1a8d5e167c562533e129903a0e625

  • SHA1

    eca0046b5f7d100852fad61d2f0efcc59abd45ca

  • SHA256

    f4f6649e6a1bc4e770c303bf040948ac2c6cd0537bf26e0a85e7846de7192a47

  • SHA512

    e1325967840e02111985febd78aed0dc0ea796ca622edd4c92cfe95920e556dd36745edd8c39da37d9fe27fc169caef9c970675ef47001a644800a90ebb0d5d1

  • SSDEEP

    24576:PLinuSeUge/1EqtQ9L2wZdh3rWRTfGVU4ub9/54HhGU0:PLG5etiSqtQRzlrc3bl5mGl

Malware Config

Targets

    • Target

      3bd1a8d5e167c562533e129903a0e625_JaffaCakes118

    • Size

      1.0MB

    • MD5

      3bd1a8d5e167c562533e129903a0e625

    • SHA1

      eca0046b5f7d100852fad61d2f0efcc59abd45ca

    • SHA256

      f4f6649e6a1bc4e770c303bf040948ac2c6cd0537bf26e0a85e7846de7192a47

    • SHA512

      e1325967840e02111985febd78aed0dc0ea796ca622edd4c92cfe95920e556dd36745edd8c39da37d9fe27fc169caef9c970675ef47001a644800a90ebb0d5d1

    • SSDEEP

      24576:PLinuSeUge/1EqtQ9L2wZdh3rWRTfGVU4ub9/54HhGU0:PLG5etiSqtQRzlrc3bl5mGl

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks