14a11c9aa195e60794ec35dd35ff971f52811c58c140c412826f585c8af66749 | Triage

Sharing

General

Target

051d21ff3614b0a3d1234ad3fce8d776_JaffaCakes118
Size

187KB
Sample

240428-nxbnhseh84
MD5

051d21ff3614b0a3d1234ad3fce8d776
SHA1

cd127db0fbbc1261bd4a51cfdbc498aabae7407f
SHA256

14a11c9aa195e60794ec35dd35ff971f52811c58c140c412826f585c8af66749
SHA512

08affd3ec3fe442361db0b7312876d40bdb15ee8c74a0e93630ee219ee61d3de56b791b53244e66a5ed119f58767320da082cd70b99c50ab6a78eefd88c6e23d
SSDEEP

3072:nPswAeoymWlDPM540Ppae9ZkOElwsE8JhoWo7AwVsB1:n5AfypPZ0Z9dKE8wV0As

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  051d21ff3614b0a3d1234ad3fce8d776_JaffaCakes118
- Size
  
  187KB
- MD5
  
  051d21ff3614b0a3d1234ad3fce8d776
- SHA1
  
  cd127db0fbbc1261bd4a51cfdbc498aabae7407f
- SHA256
  
  14a11c9aa195e60794ec35dd35ff971f52811c58c140c412826f585c8af66749
- SHA512
  
  08affd3ec3fe442361db0b7312876d40bdb15ee8c74a0e93630ee219ee61d3de56b791b53244e66a5ed119f58767320da082cd70b99c50ab6a78eefd88c6e23d
- SSDEEP
  
  3072:nPswAeoymWlDPM540Ppae9ZkOElwsE8JhoWo7AwVsB1:n5AfypPZ0Z9dKE8wV0As
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2