60c4a5a5dd240aaa6f516f4a2c78604af4301a119f3ed83d82ddac2043310eb1 | Triage

Sharing

General

Target

ea4227ed8f8435961aeab0565d8388a9_JaffaCakes118
Size

1.4MB
Sample

240409-se8mrade91
MD5

ea4227ed8f8435961aeab0565d8388a9
SHA1

8786766fb2a6bf58ad3a8e029f0b7c057446aed0
SHA256

60c4a5a5dd240aaa6f516f4a2c78604af4301a119f3ed83d82ddac2043310eb1
SHA512

9f017cada883b72b201adf3922a7d96a9c496ccef666957d46f08d7cc1cef516c82ba8f44430dcc65ff56347054af36f1cbf16e5a1828de0bdb1ce64cf230909
SSDEEP

24576:btZ+KvyNhXCV4E8BXAfrnkcAqU0A+2X9cFeMUclVOrnTTg4shqp0VIt9iY:buKv+hyz8grnkQfqNClVJU9i

Score

7^/10

evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  ea4227ed8f8435961aeab0565d8388a9_JaffaCakes118
- Size
  
  1.4MB
- MD5
  
  ea4227ed8f8435961aeab0565d8388a9
- SHA1
  
  8786766fb2a6bf58ad3a8e029f0b7c057446aed0
- SHA256
  
  60c4a5a5dd240aaa6f516f4a2c78604af4301a119f3ed83d82ddac2043310eb1
- SHA512
  
  9f017cada883b72b201adf3922a7d96a9c496ccef666957d46f08d7cc1cef516c82ba8f44430dcc65ff56347054af36f1cbf16e5a1828de0bdb1ce64cf230909
- SSDEEP
  
  24576:btZ+KvyNhXCV4E8BXAfrnkcAqU0A+2X9cFeMUclVOrnTTg4shqp0VIt9iY:buKv+hyz8grnkQfqNClVJU9i
Score

7^/10

evasion spyware stealer trojan
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Uses the VBS compiler for execution
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scripting

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Scripting

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionspywarestealertrojan

behavioral2

evasionspywarestealertrojan