6ac2b43431285c5ea88c5c48770b33b5327a9daa890c999354c340d7807052f2

Sharing

Copy URL

Twitter E-mail

General

Target

0805839acfc092216eeaa0eb143eb297_JaffaCakes118
Size

1.4MB
Sample

240620-vkpsyasell
MD5

0805839acfc092216eeaa0eb143eb297
SHA1

0cb9fb7d4170b4ce6744d1fcc1acca78c04d901a
SHA256

6ac2b43431285c5ea88c5c48770b33b5327a9daa890c999354c340d7807052f2
SHA512

40e6072e08268b5da10b68c1b7e5f50dd3881d657bedf72eb36f4c4731a336f05dee8d020a816274cf58b860d5361b8531682e6a1d64e99cedbc04dd8e8558f9
SSDEEP

24576:SEXRnaoB7CevgMcY6msA9/dTkjerszZixzyOU:VXR5B73vgMrh/dwqrJxI

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  0805839acfc092216eeaa0eb143eb297_JaffaCakes118
- Size
  
  1.4MB
- MD5
  
  0805839acfc092216eeaa0eb143eb297
- SHA1
  
  0cb9fb7d4170b4ce6744d1fcc1acca78c04d901a
- SHA256
  
  6ac2b43431285c5ea88c5c48770b33b5327a9daa890c999354c340d7807052f2
- SHA512
  
  40e6072e08268b5da10b68c1b7e5f50dd3881d657bedf72eb36f4c4731a336f05dee8d020a816274cf58b860d5361b8531682e6a1d64e99cedbc04dd8e8558f9
- SSDEEP
  
  24576:SEXRnaoB7CevgMcY6msA9/dTkjerszZixzyOU:VXR5B73vgMrh/dwqrJxI
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  20KB
- MD5
  
  de2b06d8abcd4a1d3330e415ce638a6a
- SHA1
  
  2f1bf738915b288530dedb861f4ea4f60069a91f
- SHA256
  
  8f62633831a326174f05e89503e42a493aa834fa6d7ba7138d9d57ac5873512d
- SHA512
  
  8dbc0edb71d6acc327418270b33d5627d7940ce406e54152af9f6c8f6d90c7239aa647a0e1f4769d0aa8bd3e38d60643e6356ff7a5ccf7dc44c5617f72277b70
- SSDEEP
  
  96:J1szPlsFYmIGExrjwIqiwZePAYyU76b+4d:Juztr+8wzg7xN4
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/Math.dll
- Size
  
  66KB
- MD5
  
  b140459077c7c39be4bef249c2f84535
- SHA1
  
  c56498241c2ddafb01961596da16d08d1b11cd35
- SHA256
  
  0598f7d83db44929b7170c1285457b52b4281185f63ced102e709bf065f10d67
- SHA512
  
  fbcb19a951d96a216d73b6b3e005338bbb6e11332c6cc8c3f179ccd420b4db0e5682dc4245bd120dcb67bc70960eab368e74c68c7c165a485a12a7d0d8a00328
- SSDEEP
  
  1536:0P43WZ4Ql60gam+2MwRmPeqFVHbQH0ZZ1Iet:0wU609VMH0T/t
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/NSISdl.dll
- Size
  
  14KB
- MD5
  
  a5f8399a743ab7f9c88c645c35b1ebb5
- SHA1
  
  168f3c158913b0367bf79fa413357fbe97018191
- SHA256
  
  dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
- SHA512
  
  824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
- SSDEEP
  
  192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/inetc.dll
- Size
  
  20KB
- MD5
  
  2f94245152dbd233e248909f9c01c578
- SHA1
  
  ab4e5879c001b36a2f9ff214946599fd015edda9
- SHA256
  
  4c4d85eb9725fc7fade03467990e3dd9671c29a7870c97e69babc2cb3c9adef9
- SHA512
  
  f92830de27d6663be5e0df9e32cd88732bc7ee93b14c1ded65258c325d22436400801aff1124f40400c6c3b3c16e71deb08436714716f3888d13a8a6b6a32231
- SSDEEP
  
  384:vBCwUYeQ8geEQyhUtXlcgCHe8DSMk8/UhU7ya4L+0Ac9khYLMkIX0+GvRgbJ1:owUEpet1cgCHe8DNN/UhUua4L
Score

3^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/jsonparser.dll
- Size
  
  32KB
- MD5
  
  2067be2244a8a8d6d6229537076a4830
- SHA1
  
  15a27838b7d791d19d4e1e2566b3eb94938c08e9
- SHA256
  
  7affb86cc94deba6b61a7e85337264ef8e19ef6b8a83904e22bafecbc4e1bed2
- SHA512
  
  42a2afd0dc4f0128231fbbf3b428a29bc20ca55f0f36ed02056666b8b6bb5116b409142fd5609528fc323b9987681494803dff492824bc322b94d08d370603a2
- SSDEEP
  
  384:/iPnzsAzMhAEDKha6zmoh7ja939CH9aR5M+SKseGIJGVHHCldw9t+:/iPYAzMhAEsVj0NNHseGIgHiUt+
Score

3^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/md5dll.dll
- Size
  
  8KB
- MD5
  
  a7d710e78711d5ab90e4792763241754
- SHA1
  
  f31cecd926c5d497aba163a17b75975ec34beb13
- SHA256
  
  9b05dd603f13c196f3f21c43f48834208fed2294f7090fcd1334931014611fb2
- SHA512
  
  f0ca2d6f9a8aeac84ef8b051154a041adffc46e3e9aced142e9c7bf5f7272b047e1db421d38cb2d9182d7442bee3dd806618b019ec042a23ae0e71671d2943c0
- SSDEEP
  
  96:YV2qpbvYSflug0Dvxn6GuKM9sh1gdrN9+oB7FT9WibOoBZcko5N/:Yt5lugRK8hlvbwkKV
Score

3^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/nshist.dll
- Size
  
  39KB
- MD5
  
  56bf72527ae93d35cd8f8778ad29902b
- SHA1
  
  3248a7ca75a3c2e715a13b455ccc5d45e04cf9b9
- SHA256
  
  77f38240d729758f04fbd6ac00dc638e99ba27c42fa48200c99f51449e245343
- SHA512
  
  c8ea0445bb83bb67dffa85b167fcc9b6ea874493442db5707e939ee0f2864a0d464ee605de486febffc27b60cd3c35a91302f226f6c4f13186119687a7e6000e
- SSDEEP
  
  384:Rb8/5X+ZjXpv4jNfoOZdd5P79dHwvwXTnxsEVRhCSkX4vJtgJ4LxvI5PMC3vlhw:ecOBxTTBdHwvwXtsQRhCX4vG4RIKKw
Score

3^/10
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/nsisunz.dll
- Size
  
  40KB
- MD5
  
  5f13dbc378792f23e598079fc1e4422b
- SHA1
  
  5813c05802f15930aa860b8363af2b58426c8adf
- SHA256
  
  6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d
- SHA512
  
  9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5
- SSDEEP
  
  384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4
Score

3^/10
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/quickzip.exe
- Size
  
  3.1MB
- MD5
  
  47a4632388eef08cf134ef192005df97
- SHA1
  
  32cf50ca6d56b75175bb84eca80dcf05ce187cce
- SHA256
  
  0670d04c019b2b25b0550d1913dc366ce68a1e52a6e275cb0c9b21ab456dc7b8
- SHA512
  
  3b4050937e98fe70a5474fdd2c349fd099f82aacf73c76b050659ab7670b4893bd096caeda3dcaa3966c9f31c7bb35fc98a9ea8e30efe5c03e25a51245a657b2
- SSDEEP
  
  98304:Gq9dLs1qZysB3PR3HJj+Ca2ZZrzcL91LQnTzqhCd:Z9Zs4dB/R3pj+CjZVUv0nTPd
Score

3^/10
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  325b008aec81e5aaa57096f05d4212b5
- SHA1
  
  27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA256
  
  c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- SHA512
  
  18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP
  
  192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score

3^/10
behavioral23 behavioral24
- Target
  
  QZIP.dll
- Size
  
  1.1MB
- MD5
  
  ccd8ef37675ea844338578104dcac3aa
- SHA1
  
  6878b72dfe87f49a0f47f0ae5c501da3147a81e3
- SHA256
  
  fa4c48eb9b10d98f3201dbce71b2201b4d13bc75f6e9f6aa17599ac04209d0ae
- SHA512
  
  a4e4af42e1aa400ff3dc2f0bfbffb2830465c2e2d8cc9976ddf8711645fa798d27bfb8f2b4d1bc36cc6cd1744001ea2a637f6daba4d511c4fd77c8b4b228d682
- SSDEEP
  
  24576:gPAYBJgU8vy/oLhiPAK8NyCTfHKjumPB1QnTzX39hPKBY:gPAIJ0vLcLCjK1LQnTzqBY
Score

1^/10
behavioral25 behavioral26
- Target
  
  QZIP.exe
- Size
  
  248KB
- MD5
  
  91aa0f9f09dda10d822056d34db089bb
- SHA1
  
  7f867bbc7a861aaae98f5811977df77ddc40e02f
- SHA256
  
  3c7db693f7b97f820a4e336650f9d07dc683230c472fce7429fc45da765b6108
- SHA512
  
  bcbf89de909724236329a51d036ccd4f58dcbe06742e908a290a2873389eebc05cb016760e9aafd81063c41d324dc0cfceb382cd06b149215e6ad856cfe77bf6
- SSDEEP
  
  6144:yqFWLAIlV7kLS/KWVfivJnrs5L3OULFNmLGQ3+HD1iUgjIaiG:yIWLnV7kLAKWVfiv6LeUqGQ3k1
Score

1^/10
behavioral27 behavioral28
- Target
  
  QZIP.sfx
- Size
  
  262KB
- MD5
  
  207d9de84e6d8473e198163cd070523e
- SHA1
  
  d3419bdc1313e952314989db308e286538139694
- SHA256
  
  5453cbed3f4eeda512b77d19ac45a6d715672cf17aa1f2e50df709e19b45d982
- SHA512
  
  1865d88c11f77621824822f430d9be61a77bfe8eabe6ccfa528416991c6df32dafb16e01b38b3de6628d42bf9a8d534dfe703bcfae719af6e5511a2bf6605af0
- SSDEEP
  
  6144:uzYpD698yY8mMz5A6F05wWxKQ8U7Ty7U2vu0zCn7L5:uz6D3y1mMlA6F05zxKQ8e0vu0z
Score

1^/10
behavioral29 behavioral30
- Target
  
  QZIPCon.sfx
- Size
  
  250KB
- MD5
  
  1a7ec6dd170847c99dd263cb60545de4
- SHA1
  
  4a67320ea2d41b647f21958b75e2d6ccda37ad54
- SHA256
  
  299e1103725dc7412081f983d28529586d2af59b11becf97494fb1443e471fab
- SHA512
  
  7f04f38d89119958e5805227d18705783d2548939a4d5ab11ab508ce7646729f1f2cd56a414e57ffdd08bddce27e2a364fcce5c982dc4118bb025219ab02e584
- SSDEEP
  
  6144:T5abYRSKVUMpp3RZ41if3uXMXr2SlrTvuIVDylIQke:TUbYRSUpp3RZYif3uXMX13vuIV
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Reads user/profile data of web browsers

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32