44ebfeade7b8b3d69375291bb9a89ee6c1fa4d2b29ee9aee28f775ae15cd88ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f937aea0082f31ca364df38242807277_JaffaCakes118
Size

1.2MB
Sample

240419-b129esda33
MD5

f937aea0082f31ca364df38242807277
SHA1

e432e95fede0daa95532c7acc79f7d39f9f564d6
SHA256

44ebfeade7b8b3d69375291bb9a89ee6c1fa4d2b29ee9aee28f775ae15cd88ac
SHA512

5eb5f8dc3f1829c20b82cf6ce248d9e2c1a72976da94fc2b08e17f2e76877c7cfc87e6e84a53c3a6aa824b73a86ece4d4f3b11fe337ececadef6418cc5eb6e0a
SSDEEP

12288:Bp2qenHjdjDRIBwhbbkPKPQ7Fgg7RAewa+4AP680eOLtVP4fNLszkyyQ+udQAuLO:BpAnDd0whbbkyVg+4Be68Lov+jFqN0q

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  f937aea0082f31ca364df38242807277_JaffaCakes118
- Size
  
  1.2MB
- MD5
  
  f937aea0082f31ca364df38242807277
- SHA1
  
  e432e95fede0daa95532c7acc79f7d39f9f564d6
- SHA256
  
  44ebfeade7b8b3d69375291bb9a89ee6c1fa4d2b29ee9aee28f775ae15cd88ac
- SHA512
  
  5eb5f8dc3f1829c20b82cf6ce248d9e2c1a72976da94fc2b08e17f2e76877c7cfc87e6e84a53c3a6aa824b73a86ece4d4f3b11fe337ececadef6418cc5eb6e0a
- SSDEEP
  
  12288:Bp2qenHjdjDRIBwhbbkPKPQ7Fgg7RAewa+4AP680eOLtVP4fNLszkyyQ+udQAuLO:BpAnDd0whbbkyVg+4Be68Lov+jFqN0q
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2