56907001785431319f77219f4f37d98d18985438155dbf08b9290d36963730ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb885a4bd84003f2e1527ca477197967_JaffaCakes118
Size

1.1MB
Sample

240410-vbss8shd61
MD5

eb885a4bd84003f2e1527ca477197967
SHA1

4b0c9b9420a18b2e7c366eb8a5acda2b9ed7dd6d
SHA256

56907001785431319f77219f4f37d98d18985438155dbf08b9290d36963730ee
SHA512

f8cf4df4d0d7176408b0d38b761e8f88e9d34ab66248e28dd81342f9978d3b3a12b4083a595046b2e7bcdccc726c1ba6df8f53250a12240a68d6ac4b4a82af8e
SSDEEP

12288:pzZ0u+A7qWwdTdZsNdXzRNCWWIBXiILIRl1vMJWf9X/zb12LSTH/8Ke65UDr2//5:30RnaT2WWA/skJWf9X/zb1XTHhmDqGM

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  eb885a4bd84003f2e1527ca477197967_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  eb885a4bd84003f2e1527ca477197967
- SHA1
  
  4b0c9b9420a18b2e7c366eb8a5acda2b9ed7dd6d
- SHA256
  
  56907001785431319f77219f4f37d98d18985438155dbf08b9290d36963730ee
- SHA512
  
  f8cf4df4d0d7176408b0d38b761e8f88e9d34ab66248e28dd81342f9978d3b3a12b4083a595046b2e7bcdccc726c1ba6df8f53250a12240a68d6ac4b4a82af8e
- SSDEEP
  
  12288:pzZ0u+A7qWwdTdZsNdXzRNCWWIBXiILIRl1vMJWf9X/zb12LSTH/8Ke65UDr2//5:30RnaT2WWA/skJWf9X/zb1XTHhmDqGM
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2