poullight | 297f5728b2745385894404fb56f2bdb83f6565cf74aafcc101c372022af152c6 | Triage

Sharing

General

Target

9317bbbc3823a23e4f439649eb9a65a5_JaffaCakes118
Size

100KB
Sample

240604-ah2dqsfb35
MD5

9317bbbc3823a23e4f439649eb9a65a5
SHA1

8f2aeedea7a22fac65cacc21f8c99b7f59cfdfad
SHA256

297f5728b2745385894404fb56f2bdb83f6565cf74aafcc101c372022af152c6
SHA512

eb3329ce3c2c7c20270dbce63414f185a4c521ec9ec5d42aee8aec77d426209a2c8be158ea5001ae99987692ff20e0c130c3f11ea09f732256538544ddea6112
SSDEEP

1536:mJv5McKmdnrc4TXNYx1vZD8qlIGrUZ5Bx5MlD7wOHUN4ZKNJf:mJeunoMXNuI+E5B/M2O0OgF

Score

10^/10

poullight spyware stealer trojan

Malware Config

Targets

- Target
  
  9317bbbc3823a23e4f439649eb9a65a5_JaffaCakes118
- Size
  
  100KB
- MD5
  
  9317bbbc3823a23e4f439649eb9a65a5
- SHA1
  
  8f2aeedea7a22fac65cacc21f8c99b7f59cfdfad
- SHA256
  
  297f5728b2745385894404fb56f2bdb83f6565cf74aafcc101c372022af152c6
- SHA512
  
  eb3329ce3c2c7c20270dbce63414f185a4c521ec9ec5d42aee8aec77d426209a2c8be158ea5001ae99987692ff20e0c130c3f11ea09f732256538544ddea6112
- SSDEEP
  
  1536:mJv5McKmdnrc4TXNYx1vZD8qlIGrUZ5Bx5MlD7wOHUN4ZKNJf:mJeunoMXNuI+E5B/M2O0OgF
Score

10^/10

poullight spyware stealer trojan
- Poullight
  Poullight is an information stealer first seen in March 2020.
  trojan stealer poullight
- Poullight Stealer payload
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

poullightspywarestealertrojan

behavioral2

poullightspywarestealertrojan