General

  • Target

    42b70dc6fb8644b15d1813b89fac6e26_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241014-ryz92szdpb

  • MD5

    42b70dc6fb8644b15d1813b89fac6e26

  • SHA1

    a456bf786b4a9f4798c51bf1fb5dfd489e552b90

  • SHA256

    d675a2439752f93b9021e5e8c2e96fcd0a2015c5df7427ff4a7a997c035fa6b1

  • SHA512

    3af3d4d636c2e621967d85af27f6b817fd84540f0b2e10662f9c74767a5de464921b66b93a4ee9c175efe88d56d235c7d4810fa98a57d00cdb1031a5d10709ad

  • SSDEEP

    24576:4LiF0A72nNrsqy0UGBN83CEVjZisf7kSNJbft:4LMgrsqQ704ASTt

Malware Config

Targets

    • Target

      42b70dc6fb8644b15d1813b89fac6e26_JaffaCakes118

    • Size

      1.0MB

    • MD5

      42b70dc6fb8644b15d1813b89fac6e26

    • SHA1

      a456bf786b4a9f4798c51bf1fb5dfd489e552b90

    • SHA256

      d675a2439752f93b9021e5e8c2e96fcd0a2015c5df7427ff4a7a997c035fa6b1

    • SHA512

      3af3d4d636c2e621967d85af27f6b817fd84540f0b2e10662f9c74767a5de464921b66b93a4ee9c175efe88d56d235c7d4810fa98a57d00cdb1031a5d10709ad

    • SSDEEP

      24576:4LiF0A72nNrsqy0UGBN83CEVjZisf7kSNJbft:4LMgrsqQ704ASTt

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks