Overview

overview

10

Static

static

10

9317bbbc38...18.exe

windows7-x64

10

9317bbbc38...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9317bbbc3823a23e4f439649eb9a65a5_JaffaCakes118

  • Size

    100KB

  • Sample

    240604-ah2dqsfb35

  • MD5

    9317bbbc3823a23e4f439649eb9a65a5

  • SHA1

    8f2aeedea7a22fac65cacc21f8c99b7f59cfdfad

  • SHA256

    297f5728b2745385894404fb56f2bdb83f6565cf74aafcc101c372022af152c6

  • SHA512

    eb3329ce3c2c7c20270dbce63414f185a4c521ec9ec5d42aee8aec77d426209a2c8be158ea5001ae99987692ff20e0c130c3f11ea09f732256538544ddea6112

  • SSDEEP

    1536:mJv5McKmdnrc4TXNYx1vZD8qlIGrUZ5Bx5MlD7wOHUN4ZKNJf:mJeunoMXNuI+E5B/M2O0OgF

Score
10/10
poullightspywarestealertrojan

Malware Config

Targets

    • Target

      9317bbbc3823a23e4f439649eb9a65a5_JaffaCakes118

    • Size

      100KB

    • MD5

      9317bbbc3823a23e4f439649eb9a65a5

    • SHA1

      8f2aeedea7a22fac65cacc21f8c99b7f59cfdfad

    • SHA256

      297f5728b2745385894404fb56f2bdb83f6565cf74aafcc101c372022af152c6

    • SHA512

      eb3329ce3c2c7c20270dbce63414f185a4c521ec9ec5d42aee8aec77d426209a2c8be158ea5001ae99987692ff20e0c130c3f11ea09f732256538544ddea6112

    • SSDEEP

      1536:mJv5McKmdnrc4TXNYx1vZD8qlIGrUZ5Bx5MlD7wOHUN4ZKNJf:mJeunoMXNuI+E5B/M2O0OgF

    Score
    10/10
    poullightspywarestealertrojan

    • Poullight

      Poullight is an information stealer first seen in March 2020.

      trojanstealerpoullight

    • Poullight Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks