General

  • Target

    3f09adedf32cffdc3711ef0006540cc6_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241013-lan9zstdnl

  • MD5

    3f09adedf32cffdc3711ef0006540cc6

  • SHA1

    432d7bf3d0016bd94882a0c306065bed2668c128

  • SHA256

    114a677ba5cc06976c410d4bba1e97e45cd7e60d42d3b0c22c7b034dcb8ebdce

  • SHA512

    03189e4b88a137e067214d50d6101d7ec758ce9d6cc7636c7ea220abddc876d3b45febda57dfb79f064228f9be03a1607cadb8d3fca81d4173e6dc6131e3ee81

  • SSDEEP

    24576:h1OYdaO4OBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQA:h1OsVOEt5hDG0SAMs9j8nTJ2Y68hWGQA

Malware Config

Targets

    • Target

      3f09adedf32cffdc3711ef0006540cc6_JaffaCakes118

    • Size

      1.1MB

    • MD5

      3f09adedf32cffdc3711ef0006540cc6

    • SHA1

      432d7bf3d0016bd94882a0c306065bed2668c128

    • SHA256

      114a677ba5cc06976c410d4bba1e97e45cd7e60d42d3b0c22c7b034dcb8ebdce

    • SHA512

      03189e4b88a137e067214d50d6101d7ec758ce9d6cc7636c7ea220abddc876d3b45febda57dfb79f064228f9be03a1607cadb8d3fca81d4173e6dc6131e3ee81

    • SSDEEP

      24576:h1OYdaO4OBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQA:h1OsVOEt5hDG0SAMs9j8nTJ2Y68hWGQA

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks