a6fdcb3cab84810ced812655ce290cd401413207e7b37da878ae0be35984c717 | Triage

Resubmissions

19-04-2024 22:04

240419-1yzg7ahe6y 7

19-04-2024 17:53

240419-wggtlabb98 7

Sharing

General

Target

fada0097640b5871e253d1cf541701b5_JaffaCakes118
Size

10.5MB
Sample

240419-wggtlabb98
MD5

fada0097640b5871e253d1cf541701b5
SHA1

997c6864565ab337ba36f250fee74b7b9b5fa6a3
SHA256

a6fdcb3cab84810ced812655ce290cd401413207e7b37da878ae0be35984c717
SHA512

c7017015088a0e822cc1e45d7c100cd5c51799969a002456f5f9d38efd1ea76e7c79de7bfb10ddb12b5055b15f7f6d36d2f1ffb61515cfbbf65af815f687f864
SSDEEP

196608:NDrmHS3JuOOHyjWSHAgyc2bpjCREy/1UQGx0F6p7+QvLJTpUn+Yy:N/mHS3gSjPHAs2bRqz7c7xldc

Score

7^/10

pyinstaller spyware stealer

Malware Config

Targets

- Target
  
  fada0097640b5871e253d1cf541701b5_JaffaCakes118
- Size
  
  10.5MB
- MD5
  
  fada0097640b5871e253d1cf541701b5
- SHA1
  
  997c6864565ab337ba36f250fee74b7b9b5fa6a3
- SHA256
  
  a6fdcb3cab84810ced812655ce290cd401413207e7b37da878ae0be35984c717
- SHA512
  
  c7017015088a0e822cc1e45d7c100cd5c51799969a002456f5f9d38efd1ea76e7c79de7bfb10ddb12b5055b15f7f6d36d2f1ffb61515cfbbf65af815f687f864
- SSDEEP
  
  196608:NDrmHS3JuOOHyjWSHAgyc2bpjCREy/1UQGx0F6p7+QvLJTpUn+Yy:N/mHS3gSjPHAs2bRqz7c7xldc
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2