42ac49dd7f36320fc85fe28fddd294af829fa2b37f338eab3342d9f6369141d9 | Triage

Sharing

General

Target

28c8401c6e5df5a2599ebfaa4df841e7_JaffaCakes118
Size

214KB
Sample

240706-tn7mgsxalc
MD5

28c8401c6e5df5a2599ebfaa4df841e7
SHA1

1d1da402b162b310868bde51ed368ea3a552baee
SHA256

42ac49dd7f36320fc85fe28fddd294af829fa2b37f338eab3342d9f6369141d9
SHA512

26e43e02533a000901506b809d2b69023c676d8409439147bacd40e822d1bb713c663c5080988705d7901d338bee8ee8166384884561025daf158d12556116e6
SSDEEP

3072:kgej+4yCwrQBzgnv2nRxvkStno59tboDYtxfmeOxsBv3e0oNF3bbNJhOm5CPcA9z:wqdQVgvuvkyny3zieHfeJFLbNm9m

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  28c8401c6e5df5a2599ebfaa4df841e7_JaffaCakes118
- Size
  
  214KB
- MD5
  
  28c8401c6e5df5a2599ebfaa4df841e7
- SHA1
  
  1d1da402b162b310868bde51ed368ea3a552baee
- SHA256
  
  42ac49dd7f36320fc85fe28fddd294af829fa2b37f338eab3342d9f6369141d9
- SHA512
  
  26e43e02533a000901506b809d2b69023c676d8409439147bacd40e822d1bb713c663c5080988705d7901d338bee8ee8166384884561025daf158d12556116e6
- SSDEEP
  
  3072:kgej+4yCwrQBzgnv2nRxvkStno59tboDYtxfmeOxsBv3e0oNF3bbNJhOm5CPcA9z:wqdQVgvuvkyny3zieHfeJFLbNm9m
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2