97df1ef303f0baab5c57d525fe5ce9bb55cfc6fe11381b7abbb073bae9c5fcad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

950d0c2412a542c6109da78f8ab73812_JaffaCakes118
Size

1.1MB
Sample

240604-q1lzrshd8x
MD5

950d0c2412a542c6109da78f8ab73812
SHA1

5ae11c3d1f6766f882e4dff08cf6932145975992
SHA256

97df1ef303f0baab5c57d525fe5ce9bb55cfc6fe11381b7abbb073bae9c5fcad
SHA512

75f56da824b0c72403471aca28675131bda00f7fd2f35794e04af163be4df1765747eb3ccab0730c05c10da80d636f86765c8213b54c5eb0a8edf13ee3b9f2c7
SSDEEP

24576:ug46B0VMiQNxPcsei2niTyLpRWa0Ro3JLhk97sUgbSsz:ug46BcMiQNxPPp1opRWa0Ro3Nhk977ar

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  950d0c2412a542c6109da78f8ab73812_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  950d0c2412a542c6109da78f8ab73812
- SHA1
  
  5ae11c3d1f6766f882e4dff08cf6932145975992
- SHA256
  
  97df1ef303f0baab5c57d525fe5ce9bb55cfc6fe11381b7abbb073bae9c5fcad
- SHA512
  
  75f56da824b0c72403471aca28675131bda00f7fd2f35794e04af163be4df1765747eb3ccab0730c05c10da80d636f86765c8213b54c5eb0a8edf13ee3b9f2c7
- SSDEEP
  
  24576:ug46B0VMiQNxPcsei2niTyLpRWa0Ro3JLhk97sUgbSsz:ug46BcMiQNxPPp1opRWa0Ro3Nhk977ar
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2