21e9735d52935d0b6a0e393e33edd30b204fd0e2820ca63d9a5627f40e87c077 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

606496755aa0a7ace534414b9341e80b_JaffaCakes118
Size

1.7MB
Sample

240520-wc3v9sba26
MD5

606496755aa0a7ace534414b9341e80b
SHA1

c67caf0ecf1134821aacd45d8ecb0a0d8fb9eb82
SHA256

21e9735d52935d0b6a0e393e33edd30b204fd0e2820ca63d9a5627f40e87c077
SHA512

e99e645e19d40d520530fdb2cba7637848e8e428da0f0abeb7857bcda58c9691be49f9c62656e5cfd8b30e9a73ecc0fe208f5bc81b4ac1109b9b0763b00f6be3
SSDEEP

49152:HhW51snc+LNeQTYZgAX/mGRoABjkeGGGWghV:BW51sc+LIQNAX/PBB2V

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  606496755aa0a7ace534414b9341e80b_JaffaCakes118
- Size
  
  1.7MB
- MD5
  
  606496755aa0a7ace534414b9341e80b
- SHA1
  
  c67caf0ecf1134821aacd45d8ecb0a0d8fb9eb82
- SHA256
  
  21e9735d52935d0b6a0e393e33edd30b204fd0e2820ca63d9a5627f40e87c077
- SHA512
  
  e99e645e19d40d520530fdb2cba7637848e8e428da0f0abeb7857bcda58c9691be49f9c62656e5cfd8b30e9a73ecc0fe208f5bc81b4ac1109b9b0763b00f6be3
- SSDEEP
  
  49152:HhW51snc+LNeQTYZgAX/mGRoABjkeGGGWghV:BW51sc+LIQNAX/PBB2V
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2