General

  • Target

    3d158192c1a669cc07c1141b8ff8c6fb_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241013-bx7dzawgqq

  • MD5

    3d158192c1a669cc07c1141b8ff8c6fb

  • SHA1

    bf5c249b7c51bfb2a18c9ccca1bce7dc4313ab28

  • SHA256

    2ba2716c9ebe9f783aef20277d7749312a9f3666b9fdc69944cc03ce5c6dd1a4

  • SHA512

    e3a7ff249648e326933fff34b14999daa1202b58359dfb8eb1eea10cc4f2f56df0b049442e3736b208a02963b9a0b6aa53805e292746324ec0f9d47b3d887171

  • SSDEEP

    24576:PLivN4zuoid/CVdw+7z5w9OYP9y66Sxp7X03j03zvJvF:PLA2zm4vbS9dyTM+jkzvJt

Malware Config

Targets

    • Target

      3d158192c1a669cc07c1141b8ff8c6fb_JaffaCakes118

    • Size

      1.0MB

    • MD5

      3d158192c1a669cc07c1141b8ff8c6fb

    • SHA1

      bf5c249b7c51bfb2a18c9ccca1bce7dc4313ab28

    • SHA256

      2ba2716c9ebe9f783aef20277d7749312a9f3666b9fdc69944cc03ce5c6dd1a4

    • SHA512

      e3a7ff249648e326933fff34b14999daa1202b58359dfb8eb1eea10cc4f2f56df0b049442e3736b208a02963b9a0b6aa53805e292746324ec0f9d47b3d887171

    • SSDEEP

      24576:PLivN4zuoid/CVdw+7z5w9OYP9y66Sxp7X03j03zvJvF:PLA2zm4vbS9dyTM+jkzvJt

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks