Overview

overview

10

Static

static

10

84f922cda5...18.exe

windows7-x64

7

84f922cda5...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84f922cda5d5b8bd158429b63e0200e6_JaffaCakes118

  • Size

    93KB

  • Sample

    240402-f776gaac44

  • MD5

    84f922cda5d5b8bd158429b63e0200e6

  • SHA1

    d656b89dd604ae1d97cea5e708e7f27067558dd0

  • SHA256

    e5efcb3b829fd0787b38850c413a3e56769728f38e45ebc4e9422cb936967f9f

  • SHA512

    bd496104140aaba6eddb2efeb3307ec51666e144496c055d82ddfdb2615e700b7898389428e7224090bb39aaa93bc8b93cdea7be9d25c808f8ea1636a6bcddc0

  • SSDEEP

    1536:oWTHVn5wa8TXvqHp6kzWgDaO3C54Gf3lagvHkMTafiyVDr1lVUk3jy0:oWTHVn8TXvc4O3CFvlaSED1PPj/

Score
10/10
marsstealerspywarestealer

Malware Config

Extracted

Family

marsstealer

C2

http://marsstealer.com/gate.php

Targets

    • Target

      84f922cda5d5b8bd158429b63e0200e6_JaffaCakes118

    • Size

      93KB

    • MD5

      84f922cda5d5b8bd158429b63e0200e6

    • SHA1

      d656b89dd604ae1d97cea5e708e7f27067558dd0

    • SHA256

      e5efcb3b829fd0787b38850c413a3e56769728f38e45ebc4e9422cb936967f9f

    • SHA512

      bd496104140aaba6eddb2efeb3307ec51666e144496c055d82ddfdb2615e700b7898389428e7224090bb39aaa93bc8b93cdea7be9d25c808f8ea1636a6bcddc0

    • SSDEEP

      1536:oWTHVn5wa8TXvqHp6kzWgDaO3C54Gf3lagvHkMTafiyVDr1lVUk3jy0:oWTHVn8TXvc4O3CFvlaSED1PPj/

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks