General

  • Target

    3f50adace3c67f83fca5e08b4adabefa_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241013-mfm5jswfjj

  • MD5

    3f50adace3c67f83fca5e08b4adabefa

  • SHA1

    21093c060aadeed38cacc6ab25d4d129506bd683

  • SHA256

    28faa3b0175c146c15e4b11ddecd97643c20d6c31dc18d87253636f80703ef54

  • SHA512

    ffc8f6d9ebdf34b8e656b1fac51ceadf2c3cf82c341236e16261509b93197316a86bd9c776aef3fc4908e43c6302bb1d3ee6437808f3c4a259f6bf3efc14219b

  • SSDEEP

    24576:PLiIK/88He9onJxNWJNLtw3uLmCxM6qewiGuiHMf:PLhdIp88eq8MzdiyMf

Malware Config

Targets

    • Target

      3f50adace3c67f83fca5e08b4adabefa_JaffaCakes118

    • Size

      1.0MB

    • MD5

      3f50adace3c67f83fca5e08b4adabefa

    • SHA1

      21093c060aadeed38cacc6ab25d4d129506bd683

    • SHA256

      28faa3b0175c146c15e4b11ddecd97643c20d6c31dc18d87253636f80703ef54

    • SHA512

      ffc8f6d9ebdf34b8e656b1fac51ceadf2c3cf82c341236e16261509b93197316a86bd9c776aef3fc4908e43c6302bb1d3ee6437808f3c4a259f6bf3efc14219b

    • SSDEEP

      24576:PLiIK/88He9onJxNWJNLtw3uLmCxM6qewiGuiHMf:PLhdIp88eq8MzdiyMf

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks