General

  • Target

    45fb8c2cefef5161ed476a1d9a9a06d8_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241015-fp4qbszhmj

  • MD5

    45fb8c2cefef5161ed476a1d9a9a06d8

  • SHA1

    b563fb2261fe9ca727065b6561fc134639bb43ec

  • SHA256

    bb55e014b206250742ea2c6a41c6f9570bcd64296e369cce0c4c8ac1963c581a

  • SHA512

    1021bbaf2ab88bfd0bf9fbfce41a88959196f76aa706b20c677883d9d39bfbb4a15422b8af638e6b9195b709fe3a4b574311c7a64e578e9d54b4c4530d35ead4

  • SSDEEP

    24576:cLiWPaz+/k04WZe5Gst98ifABx1/UHTJ6FGYxCEGjrfgUlX:cLnF/cWZZcfkizsX7G9X

Malware Config

Targets

    • Target

      45fb8c2cefef5161ed476a1d9a9a06d8_JaffaCakes118

    • Size

      1.0MB

    • MD5

      45fb8c2cefef5161ed476a1d9a9a06d8

    • SHA1

      b563fb2261fe9ca727065b6561fc134639bb43ec

    • SHA256

      bb55e014b206250742ea2c6a41c6f9570bcd64296e369cce0c4c8ac1963c581a

    • SHA512

      1021bbaf2ab88bfd0bf9fbfce41a88959196f76aa706b20c677883d9d39bfbb4a15422b8af638e6b9195b709fe3a4b574311c7a64e578e9d54b4c4530d35ead4

    • SSDEEP

      24576:cLiWPaz+/k04WZe5Gst98ifABx1/UHTJ6FGYxCEGjrfgUlX:cLnF/cWZZcfkizsX7G9X

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks