General

  • Target

    44e1939102e7b785edfac2ae7ea56455_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241015-aj7l5stdna

  • MD5

    44e1939102e7b785edfac2ae7ea56455

  • SHA1

    ddb759666cd50cce8d41cc2e1562c8ac311c0638

  • SHA256

    11732ce7032f96f1d9a7db003c7d0b24f6df4eefc8dc66b80a88b7f32d5ff8c3

  • SHA512

    9adc6e2e73d16384d5de30687fd2e7c8b36462b6e5e3d88f3ecc45156cdd4f9dcb6840182d010d2e103533a657b8f0ed6787989ac04f83b0abff367b596733e7

  • SSDEEP

    24576:6xllVmuE1S0B4KZqmVZBvl8Fh9kUTZq4I/yi6UlrmzYKysm0MtNZTzZQT8D+:6xJ+1Tqwvlg4UFI/y9U2YIIrUf

Malware Config

Targets

    • Target

      44e1939102e7b785edfac2ae7ea56455_JaffaCakes118

    • Size

      1.1MB

    • MD5

      44e1939102e7b785edfac2ae7ea56455

    • SHA1

      ddb759666cd50cce8d41cc2e1562c8ac311c0638

    • SHA256

      11732ce7032f96f1d9a7db003c7d0b24f6df4eefc8dc66b80a88b7f32d5ff8c3

    • SHA512

      9adc6e2e73d16384d5de30687fd2e7c8b36462b6e5e3d88f3ecc45156cdd4f9dcb6840182d010d2e103533a657b8f0ed6787989ac04f83b0abff367b596733e7

    • SSDEEP

      24576:6xllVmuE1S0B4KZqmVZBvl8Fh9kUTZq4I/yi6UlrmzYKysm0MtNZTzZQT8D+:6xJ+1Tqwvlg4UFI/y9U2YIIrUf

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks