9cdb8d8b168a815b0743f9fdbad097f029b54d3f59dcc5e673c13a1d8aba9e7d | Triage

Sharing

General

Target

0b4ce15d51b42ac7d7ee0ef54177be76_JaffaCakes118
Size

1.1MB
Sample

240624-3mbm4aybke
MD5

0b4ce15d51b42ac7d7ee0ef54177be76
SHA1

5709dee75b585912ddd0c774fa8149e3bb7785b4
SHA256

9cdb8d8b168a815b0743f9fdbad097f029b54d3f59dcc5e673c13a1d8aba9e7d
SHA512

e2f926696dc4cdb3b92913d77e104a56e2d652fbbec5794ea6d3f0ebf62b0c61dae3c0b27cf941c407970578a0288339dc74ce25483ac8215438aec4707e2af3
SSDEEP

24576:Y4oKmf5R/pOCuxGU13IlBwaa6NKHb/JBE6JuHMfMooE:Y4uv/pOCIGk3Ivwaa6IHz3E6JuHMfM

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  0b4ce15d51b42ac7d7ee0ef54177be76_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  0b4ce15d51b42ac7d7ee0ef54177be76
- SHA1
  
  5709dee75b585912ddd0c774fa8149e3bb7785b4
- SHA256
  
  9cdb8d8b168a815b0743f9fdbad097f029b54d3f59dcc5e673c13a1d8aba9e7d
- SHA512
  
  e2f926696dc4cdb3b92913d77e104a56e2d652fbbec5794ea6d3f0ebf62b0c61dae3c0b27cf941c407970578a0288339dc74ce25483ac8215438aec4707e2af3
- SSDEEP
  
  24576:Y4oKmf5R/pOCuxGU13IlBwaa6NKHb/JBE6JuHMfMooE:Y4uv/pOCIGk3Ivwaa6IHz3E6JuHMfM
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2