General

  • Target

    JaffaCakes118_63ce68370dd3a2aa1703cb2577322d77

  • Size

    2.2MB

  • Sample

    250115-2mppaaxrfs

  • MD5

    63ce68370dd3a2aa1703cb2577322d77

  • SHA1

    240f5e6ee35ff1c5c1f14a2b1834114bcb951aba

  • SHA256

    4e169ea387bba50c28d6fccde35ce461c4981b98e43be038f323e104a04dacd9

  • SHA512

    5b63d2c2c2fa63002424db1525ea922e79c03b23ad476d9d2f25f30a1bd9cf72d7a133f4aabad1915f776b804f953a1d38f970d3d4ee99e1ed0ad0ab60fcfe43

  • SSDEEP

    49152:HGkQp0MyQE9USIfNwTDGtp+4eFqLeq2k1KKJM/IAKQfqJF/ZgD/:HBQSNXJIO2Lr1KKJ1QqJFG7

Malware Config

Targets

    • Target

      JaffaCakes118_63ce68370dd3a2aa1703cb2577322d77

    • Size

      2.2MB

    • MD5

      63ce68370dd3a2aa1703cb2577322d77

    • SHA1

      240f5e6ee35ff1c5c1f14a2b1834114bcb951aba

    • SHA256

      4e169ea387bba50c28d6fccde35ce461c4981b98e43be038f323e104a04dacd9

    • SHA512

      5b63d2c2c2fa63002424db1525ea922e79c03b23ad476d9d2f25f30a1bd9cf72d7a133f4aabad1915f776b804f953a1d38f970d3d4ee99e1ed0ad0ab60fcfe43

    • SSDEEP

      49152:HGkQp0MyQE9USIfNwTDGtp+4eFqLeq2k1KKJM/IAKQfqJF/ZgD/:HBQSNXJIO2Lr1KKJ1QqJFG7

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks