aa583feb70c66f0d6c571f09853b0a0cbbfb0a02fd99f08171efa7adcbc6513a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa69735af8499f7aeae18bf37fd100cc_JaffaCakes118
Size

6.4MB
Sample

240614-ssz8jazerq
MD5

aa69735af8499f7aeae18bf37fd100cc
SHA1

281b32f23ba4252c75728e5a8ba5f96a7099bfd6
SHA256

aa583feb70c66f0d6c571f09853b0a0cbbfb0a02fd99f08171efa7adcbc6513a
SHA512

e8f7e25be13473907a4371ad4aed859ff6c9e56da92e6c33c30e72660cf338bdc99d56ca36d46cf7ab0846274de8ec07d3b288202e7f2b530fbc80be1f73c8ab
SSDEEP

196608:MGIUFEkRuWJysVYvsOktdIQLOMIdiwqEwLlaI:cKEvWJztaL/djwLla

Score

7^/10

pyinstaller spyware stealer

Malware Config

Targets

- Target
  
  aa69735af8499f7aeae18bf37fd100cc_JaffaCakes118
- Size
  
  6.4MB
- MD5
  
  aa69735af8499f7aeae18bf37fd100cc
- SHA1
  
  281b32f23ba4252c75728e5a8ba5f96a7099bfd6
- SHA256
  
  aa583feb70c66f0d6c571f09853b0a0cbbfb0a02fd99f08171efa7adcbc6513a
- SHA512
  
  e8f7e25be13473907a4371ad4aed859ff6c9e56da92e6c33c30e72660cf338bdc99d56ca36d46cf7ab0846274de8ec07d3b288202e7f2b530fbc80be1f73c8ab
- SSDEEP
  
  196608:MGIUFEkRuWJysVYvsOktdIQLOMIdiwqEwLlaI:cKEvWJztaL/djwLla
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2