General

  • Target

    53ed4b9fa634ccc7b506defd0e528f69_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241017-1tgftayeqd

  • MD5

    53ed4b9fa634ccc7b506defd0e528f69

  • SHA1

    e4bb95bfcad2d68a26267acf1f85a8ee3004a468

  • SHA256

    ea2e36c63eb05f84875e99259ec6b598cfa58a8a42ad35a21d57560b6af0f326

  • SHA512

    e9b790ee44dcd0f941b254e4f386f14531cbe389005ee43cef24988bcdd2e46c8828b53513fe67db63151b29861ca1715b2f185f17964ea529146c495c745cec

  • SSDEEP

    24576:3Lik27O7oBlYWW3uPweWF9FUwPFH1+fl+snExfzOnbbVbR:3LSa7yaHDFx0i6FR

Malware Config

Targets

    • Target

      53ed4b9fa634ccc7b506defd0e528f69_JaffaCakes118

    • Size

      1.0MB

    • MD5

      53ed4b9fa634ccc7b506defd0e528f69

    • SHA1

      e4bb95bfcad2d68a26267acf1f85a8ee3004a468

    • SHA256

      ea2e36c63eb05f84875e99259ec6b598cfa58a8a42ad35a21d57560b6af0f326

    • SHA512

      e9b790ee44dcd0f941b254e4f386f14531cbe389005ee43cef24988bcdd2e46c8828b53513fe67db63151b29861ca1715b2f185f17964ea529146c495c745cec

    • SSDEEP

      24576:3Lik27O7oBlYWW3uPweWF9FUwPFH1+fl+snExfzOnbbVbR:3LSa7yaHDFx0i6FR

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks