General

  • Target

    JaffaCakes118_1c64c9085bb746dae365b82e7d755e78

  • Size

    1.3MB

  • Sample

    250704-vgdw9sbl8t

  • MD5

    1c64c9085bb746dae365b82e7d755e78

  • SHA1

    6e4152f1c36ab6a09729f5a19f7bf7301041838b

  • SHA256

    1b9a8d4c3926bde5f1746bcef996428590a534c579daf4eb215915376d5be480

  • SHA512

    38eec277851bc9aee440e946a08fc4ed376cc60cc8644ed554a8d3a1a832cdeef475f6c736a428d6c2bf77885f93faba70b6b4130d853a51fde9bb639b97fc16

  • SSDEEP

    24576:NrJKUKCvzuei/bc6EGn5u5TtyJ8adjCzjyhhcDkPQcKiwMH5yUKc5thLfrXa7sj0:N1Kbazur/bc6/nRJ/aOheDkPQcKiwMHX

Malware Config

Targets

    • Target

      JaffaCakes118_1c64c9085bb746dae365b82e7d755e78

    • Size

      1.3MB

    • MD5

      1c64c9085bb746dae365b82e7d755e78

    • SHA1

      6e4152f1c36ab6a09729f5a19f7bf7301041838b

    • SHA256

      1b9a8d4c3926bde5f1746bcef996428590a534c579daf4eb215915376d5be480

    • SHA512

      38eec277851bc9aee440e946a08fc4ed376cc60cc8644ed554a8d3a1a832cdeef475f6c736a428d6c2bf77885f93faba70b6b4130d853a51fde9bb639b97fc16

    • SSDEEP

      24576:NrJKUKCvzuei/bc6EGn5u5TtyJ8adjCzjyhhcDkPQcKiwMH5yUKc5thLfrXa7sj0:N1Kbazur/bc6/nRJ/aOheDkPQcKiwMHX

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops Chrome extension

MITRE ATT&CK Enterprise v16

Tasks