e24413ea88aa2c62bd3737a770166fed1def5f37a98074de47bf43745103795b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f50afbfe9f36ebe54b8c086bb2993910_JaffaCakes118
Size

1.9MB
Sample

240417-e6zbhafd4t
MD5

f50afbfe9f36ebe54b8c086bb2993910
SHA1

af8ba6e1ff626da7cb25e8cf3fb5fe8d453a736f
SHA256

e24413ea88aa2c62bd3737a770166fed1def5f37a98074de47bf43745103795b
SHA512

0ee6d0dc695eef7f65342a323b3cc56211dfd40f18e074256239c20be9a79a2b1a079e219c6d0ee08b0cae9615dd71ca1a31f7108ab5a6ef26d67018cb9058dd
SSDEEP

49152:TP+CKeQBTjCDxXF8AD+kPbf/5TtrEmerThZEVuj5lpN+qKXMtdFb:THOHaXWAD+sxtrOZEVujrbKctz

Score

7^/10

aspackv2 spyware stealer

Malware Config

Targets

- Target
  
  f50afbfe9f36ebe54b8c086bb2993910_JaffaCakes118
- Size
  
  1.9MB
- MD5
  
  f50afbfe9f36ebe54b8c086bb2993910
- SHA1
  
  af8ba6e1ff626da7cb25e8cf3fb5fe8d453a736f
- SHA256
  
  e24413ea88aa2c62bd3737a770166fed1def5f37a98074de47bf43745103795b
- SHA512
  
  0ee6d0dc695eef7f65342a323b3cc56211dfd40f18e074256239c20be9a79a2b1a079e219c6d0ee08b0cae9615dd71ca1a31f7108ab5a6ef26d67018cb9058dd
- SSDEEP
  
  49152:TP+CKeQBTjCDxXF8AD+kPbf/5TtrEmerThZEVuj5lpN+qKXMtdFb:THOHaXWAD+sxtrOZEVujrbKctz
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2