1a9bb438f6f5d754f2acd3698fd8c9cd63b7b8f88c58aa0ce537b8705c417d64 | Triage

Sharing

General

Target

219183de13a5233fefec2ad27e65ed43_JaffaCakes118
Size

1.1MB
Sample

240507-y34atsgf82
MD5

219183de13a5233fefec2ad27e65ed43
SHA1

240d3cc87c853a8b9d5670a72860aa3695b401a9
SHA256

1a9bb438f6f5d754f2acd3698fd8c9cd63b7b8f88c58aa0ce537b8705c417d64
SHA512

527a430a62fa30550fc9b29bd7cffe08c7fae99c28b3e0a675a44197038586ebcd2d873dd591496525ab4f14a026bb537a7d7f352dc759b6a74e6d79a5344832
SSDEEP

24576:0aqC698aa2aeoxvshiGjVWcGbtb8bpBEVD5PBmDTMFF4tL:P6q9qAUhHjVWcWwpWPsDTiFY

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  219183de13a5233fefec2ad27e65ed43_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  219183de13a5233fefec2ad27e65ed43
- SHA1
  
  240d3cc87c853a8b9d5670a72860aa3695b401a9
- SHA256
  
  1a9bb438f6f5d754f2acd3698fd8c9cd63b7b8f88c58aa0ce537b8705c417d64
- SHA512
  
  527a430a62fa30550fc9b29bd7cffe08c7fae99c28b3e0a675a44197038586ebcd2d873dd591496525ab4f14a026bb537a7d7f352dc759b6a74e6d79a5344832
- SSDEEP
  
  24576:0aqC698aa2aeoxvshiGjVWcGbtb8bpBEVD5PBmDTMFF4tL:P6q9qAUhHjVWcWwpWPsDTiFY
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2