12cdb3eec1e8d653cc0ee76142ff834ee30da9d1098eb4585bfd5793f40c93f7 | Triage

Sharing

General

Target

23695a84dcaee6beffab6a2302d50f91_JaffaCakes118
Size

1.0MB
Sample

240703-xlxw2stajj
MD5

23695a84dcaee6beffab6a2302d50f91
SHA1

891f14b1b7d2ba2ea63424abbb1db1250e1261c2
SHA256

12cdb3eec1e8d653cc0ee76142ff834ee30da9d1098eb4585bfd5793f40c93f7
SHA512

633f7fde367ef0ecdfe66b5bf3e642cd99373a06646dab8642d3a794f6732e15661af7b810c7e8bc18dacbf6bb3159e266049c2ce70795a78d0c81725d8d2d6d
SSDEEP

24576:LsSXtCK7/VosEFgaE8eW0NsrK908QARTl7Dm4fTX:QitCItojFgz8eW0nLQARTNKY

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  23695a84dcaee6beffab6a2302d50f91_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  23695a84dcaee6beffab6a2302d50f91
- SHA1
  
  891f14b1b7d2ba2ea63424abbb1db1250e1261c2
- SHA256
  
  12cdb3eec1e8d653cc0ee76142ff834ee30da9d1098eb4585bfd5793f40c93f7
- SHA512
  
  633f7fde367ef0ecdfe66b5bf3e642cd99373a06646dab8642d3a794f6732e15661af7b810c7e8bc18dacbf6bb3159e266049c2ce70795a78d0c81725d8d2d6d
- SSDEEP
  
  24576:LsSXtCK7/VosEFgaE8eW0NsrK908QARTl7Dm4fTX:QitCItojFgz8eW0nLQARTNKY
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2