87fbec7cca91b5e2938b66d37b07711818ad55055255328642f47a765e4c5bea | Triage

Sharing

General

Target

085fd799fd75206b36c4314161feb3ff_JaffaCakes118
Size

1.0MB
Sample

240624-n5ncaa1bpd
MD5

085fd799fd75206b36c4314161feb3ff
SHA1

a632db41c7fa80e43477093399d60b256f6f7e2c
SHA256

87fbec7cca91b5e2938b66d37b07711818ad55055255328642f47a765e4c5bea
SHA512

7613e7d8a7a74e125437630a92420dac8bf0381f82bf8380a156ba69060e498db828071b7d3dd667b9200f1fb94da15c2468428b50b17a923a7808b04b585fd3
SSDEEP

24576:d8loJqV8XTYGe/HmjvT876IBVBdEJl1+Xb4tnqADwt/7dQyZE1TdrwccfV9:dooJDDevm46fwt/RAecw

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  085fd799fd75206b36c4314161feb3ff_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  085fd799fd75206b36c4314161feb3ff
- SHA1
  
  a632db41c7fa80e43477093399d60b256f6f7e2c
- SHA256
  
  87fbec7cca91b5e2938b66d37b07711818ad55055255328642f47a765e4c5bea
- SHA512
  
  7613e7d8a7a74e125437630a92420dac8bf0381f82bf8380a156ba69060e498db828071b7d3dd667b9200f1fb94da15c2468428b50b17a923a7808b04b585fd3
- SSDEEP
  
  24576:d8loJqV8XTYGe/HmjvT876IBVBdEJl1+Xb4tnqADwt/7dQyZE1TdrwccfV9:dooJDDevm46fwt/RAecw
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2