Overview

overview

7

Static

static

3

JaffaCakes...70.exe

windows10-2004-x64

7

JaffaCakes...70.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    JaffaCakes118_010bd67b2b4f5fa4aaa9941d9d46ae70

  • Size

    725KB

  • Sample

    250510-g8xxkavway

  • MD5

    010bd67b2b4f5fa4aaa9941d9d46ae70

  • SHA1

    93edb5096d8bc47a94f63ff97a2143780cead276

  • SHA256

    df1c713a6e08f6308972bc59e3d98cbf29656a7d453cb89730866637242039f4

  • SHA512

    2806a2a5ee70067530f24d04e6e254d0be28bf7b7a3a517ef89e273975622875d8a8db08288951069893f500387074798f9e4a045c2b6c11f784dcb0f011d9ff

  • SSDEEP

    12288:h1OgLdaOto99/rsFEt5hDG0SAMs9jR/jeRJKu9TJdwYGZtyjTje5jOSpJo:h1OYdaOtOBsFEt5hDG0SAMs9jR/jaJnj

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      JaffaCakes118_010bd67b2b4f5fa4aaa9941d9d46ae70

    • Size

      725KB

    • MD5

      010bd67b2b4f5fa4aaa9941d9d46ae70

    • SHA1

      93edb5096d8bc47a94f63ff97a2143780cead276

    • SHA256

      df1c713a6e08f6308972bc59e3d98cbf29656a7d453cb89730866637242039f4

    • SHA512

      2806a2a5ee70067530f24d04e6e254d0be28bf7b7a3a517ef89e273975622875d8a8db08288951069893f500387074798f9e4a045c2b6c11f784dcb0f011d9ff

    • SSDEEP

      12288:h1OgLdaOto99/rsFEt5hDG0SAMs9jR/jeRJKu9TJdwYGZtyjTje5jOSpJo:h1OYdaOtOBsFEt5hDG0SAMs9jR/jaJnj

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks