5ff2964659f84fe72beec9814c7701a1527e3c765efe884114c7687195e5439a | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11-05-2024 16:58

Sharing

Report Analysis Logs

General

Target

359d62c956fd19e04008883eaa02b27b_JaffaCakes118.exe
Size

32KB
MD5

359d62c956fd19e04008883eaa02b27b
SHA1

eeba2582cfb9d6b825072293181ad4fe67bd08a4
SHA256

5ff2964659f84fe72beec9814c7701a1527e3c765efe884114c7687195e5439a
SHA512

33abb0703408b17b52c604a2ff9570fe47767f1399004f0303479478bf32271189644c78622051f9b2494495b8dc49f413cc15b1aab94605a17d5108e0cd0857
SSDEEP

768:WHL1BjzNwTCtyyi0ZWMDTZqGqMyfDVb+QkY5lC0/8ZF7KL2BOml4cFh:+qGqhfhTkSCG8ZFmSsmey

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

C:\Users\Admin\AppData\Local\Temp\359d62c956fd19e04008883eaa02b27b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\359d62c956fd19e04008883eaa02b27b_JaffaCakes118.exe"
1⤵
PID:2264

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2264-0-0x000000007420E000-0x000000007420F000-memory.dmp

Filesize
4KB

Download
memory/2264-1-0x0000000000C90000-0x0000000000C9E000-memory.dmp

Filesize
56KB

Download
memory/2264-2-0x0000000074200000-0x00000000748EE000-memory.dmp

Filesize
6.9MB

Download
memory/2264-3-0x0000000074200000-0x00000000748EE000-memory.dmp

Filesize
6.9MB

Download