General

  • Target

    826fd5ac8f2e67c4a481c6d85aadc001_JaffaCakes118

  • Size

    255KB

  • Sample

    241031-j9k1hasqdx

  • MD5

    826fd5ac8f2e67c4a481c6d85aadc001

  • SHA1

    fb37a2cd4c7a7da4c7ed28ec7390de8dc9a26f42

  • SHA256

    9b431acb98f277289ab7a1fbde9103f937c03b9b494d8fff4bae47b882e1bfbb

  • SHA512

    b1586f6d1985c69b2b1d3265fd82cf5bca33dd4cf5b200879e1c4dfb991e5712c780fb90a3ad5f7f75b1741c612fbaaae57a2b89072a26903e3427baf054ceb0

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5/8YNHnCFvQY1q8QStWMS:h1OgLdaO/BsFvFRO/

Malware Config

Targets

    • Target

      826fd5ac8f2e67c4a481c6d85aadc001_JaffaCakes118

    • Size

      255KB

    • MD5

      826fd5ac8f2e67c4a481c6d85aadc001

    • SHA1

      fb37a2cd4c7a7da4c7ed28ec7390de8dc9a26f42

    • SHA256

      9b431acb98f277289ab7a1fbde9103f937c03b9b494d8fff4bae47b882e1bfbb

    • SHA512

      b1586f6d1985c69b2b1d3265fd82cf5bca33dd4cf5b200879e1c4dfb991e5712c780fb90a3ad5f7f75b1741c612fbaaae57a2b89072a26903e3427baf054ceb0

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5/8YNHnCFvQY1q8QStWMS:h1OgLdaO/BsFvFRO/

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks