6e249b6988554bf2609bdfa15bf24d172d05ff7d0479d26f5f6e349b30a26855 | Triage

Sharing

General

Target

190a321a179d8ec6181a61f9f709b76d_JaffaCakes118
Size

21KB
Sample

240628-gpte2axcnl
MD5

190a321a179d8ec6181a61f9f709b76d
SHA1

2418f504bf3868e7c4cb80ad33fc3360c0506970
SHA256

6e249b6988554bf2609bdfa15bf24d172d05ff7d0479d26f5f6e349b30a26855
SHA512

1b7e954b1500087d5d835e1578122c59f22f038f85ee20d9c4ab70574f605e85e8ef1c981d9b8b01f1f0b90d7e6fcf6ece9142a84afe5fe019a44c6bb625e48a
SSDEEP

384:/mM60LX3BVE6A15dNIahBtLD/trDc1sdg/yQnm1y9NE9mbi9giYxw:eMHbRE1RIahBtf/1wWd4A4bi92q

Score

8^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  190a321a179d8ec6181a61f9f709b76d_JaffaCakes118
- Size
  
  21KB
- MD5
  
  190a321a179d8ec6181a61f9f709b76d
- SHA1
  
  2418f504bf3868e7c4cb80ad33fc3360c0506970
- SHA256
  
  6e249b6988554bf2609bdfa15bf24d172d05ff7d0479d26f5f6e349b30a26855
- SHA512
  
  1b7e954b1500087d5d835e1578122c59f22f038f85ee20d9c4ab70574f605e85e8ef1c981d9b8b01f1f0b90d7e6fcf6ece9142a84afe5fe019a44c6bb625e48a
- SSDEEP
  
  384:/mM60LX3BVE6A15dNIahBtLD/trDc1sdg/yQnm1y9NE9mbi9giYxw:eMHbRE1RIahBtf/1wWd4A4bi92q
Score

8^/10

spyware stealer persistence
- Boot or Logon Autostart Execution: Port Monitors
  Adversaries may use port monitors to run an adversary supplied DLL during system boot for persistence or privilege escalation.
  persistence
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Port Monitors

Privilege Escalation

Boot or Logon Autostart Execution

Port Monitors

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

persistencespywarestealer