poullight | 70236db972081f891c2f239e67e7924bae492ddc5fe5073c838eab0a730413b2 | Triage

Sharing

General

Target

afd0fd73b658168e31480fa3f0fef267_JaffaCakes118
Size

92KB
Sample

240615-xae7vs1bmg
MD5

afd0fd73b658168e31480fa3f0fef267
SHA1

a2579217dd963ac5a5d474bac08085c632124cfe
SHA256

70236db972081f891c2f239e67e7924bae492ddc5fe5073c838eab0a730413b2
SHA512

d773200722ce9f3cd2fa15dfca5d18368b3df6d2cb70a62e8d4f251a1228b253fdf2ecaeb457c1a7192e328686ee385c55246ebc48fed68231c518602c689c4a
SSDEEP

1536:7cGDF4pwt9RRnllg3VsH/KPqRwmcUet/s7wOHUN4ZKBvfdcPJvh90:IGDARVsH/KPq6mDELO0Ogw0

Score

10^/10

poullight spyware stealer trojan

Malware Config

Targets

- Target
  
  afd0fd73b658168e31480fa3f0fef267_JaffaCakes118
- Size
  
  92KB
- MD5
  
  afd0fd73b658168e31480fa3f0fef267
- SHA1
  
  a2579217dd963ac5a5d474bac08085c632124cfe
- SHA256
  
  70236db972081f891c2f239e67e7924bae492ddc5fe5073c838eab0a730413b2
- SHA512
  
  d773200722ce9f3cd2fa15dfca5d18368b3df6d2cb70a62e8d4f251a1228b253fdf2ecaeb457c1a7192e328686ee385c55246ebc48fed68231c518602c689c4a
- SSDEEP
  
  1536:7cGDF4pwt9RRnllg3VsH/KPqRwmcUet/s7wOHUN4ZKBvfdcPJvh90:IGDARVsH/KPq6mDELO0Ogw0
Score

10^/10

poullight spyware stealer trojan
- Poullight
  Poullight is an information stealer first seen in March 2020.
  trojan stealer poullight
- Poullight Stealer payload
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

poullightspywarestealertrojan

behavioral2

poullightspywarestealertrojan