General

  • Target

    65fd5256b3cdb2b9f288ee1390bf5b6c_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241021-jcx9kawgrp

  • MD5

    65fd5256b3cdb2b9f288ee1390bf5b6c

  • SHA1

    dabfdfc88cea88ef658c2a76ab30d6d3fafbd092

  • SHA256

    5be6e7a585cf040b82d555438964f95b93dd4a3d2c5ed3fa9e7d672ef2d804d2

  • SHA512

    7edd383006166a055a682e78fd505427ba0dd13ac25fdc6d912c16d346df55d58f3e6e0bdcbe7cb001623f6d71861761e0fd3eeabd25b109a8ee8d3d8b4b7419

  • SSDEEP

    24576:PLinYG+euGgVqxPeW2wgRm70bVqB3YWNsBVCKDjPRMvkdjB:PLde9gVMcJRmIbF3LC2jPMS

Malware Config

Targets

    • Target

      65fd5256b3cdb2b9f288ee1390bf5b6c_JaffaCakes118

    • Size

      1.0MB

    • MD5

      65fd5256b3cdb2b9f288ee1390bf5b6c

    • SHA1

      dabfdfc88cea88ef658c2a76ab30d6d3fafbd092

    • SHA256

      5be6e7a585cf040b82d555438964f95b93dd4a3d2c5ed3fa9e7d672ef2d804d2

    • SHA512

      7edd383006166a055a682e78fd505427ba0dd13ac25fdc6d912c16d346df55d58f3e6e0bdcbe7cb001623f6d71861761e0fd3eeabd25b109a8ee8d3d8b4b7419

    • SSDEEP

      24576:PLinYG+euGgVqxPeW2wgRm70bVqB3YWNsBVCKDjPRMvkdjB:PLde9gVMcJRmIbF3LC2jPMS

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks