7c4370ae8d7474316c91530a9b864be303f6c7abca5e9df6067b731dafc35105 | Triage

Sharing

General

Target

2b7ce0a91e2dfb35169d176bfe6bea63_JaffaCakes118
Size

21KB
Sample

240708-jdwgcsyejp
MD5

2b7ce0a91e2dfb35169d176bfe6bea63
SHA1

64fb65731e316d00a5005d5035a95d48b664363f
SHA256

7c4370ae8d7474316c91530a9b864be303f6c7abca5e9df6067b731dafc35105
SHA512

abd8813fc9dc153e93859247fc88363c4ad3a988b8545df375c900fbd6b6dbdf263faf572e9638fcb9114902b4b4ff5c886b6e9e54a0d74e5563aec36026e511
SSDEEP

384:FBT3P7eqnVjiMUXOkJAMYhFe9lvewJd0KkvBcHRb5s/0wAxzFkqmU1kKhOYZ:FB3j5ViOkJAMEylvjd0KIqHRb5DlFkqx

Score

8^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2b7ce0a91e2dfb35169d176bfe6bea63_JaffaCakes118
- Size
  
  21KB
- MD5
  
  2b7ce0a91e2dfb35169d176bfe6bea63
- SHA1
  
  64fb65731e316d00a5005d5035a95d48b664363f
- SHA256
  
  7c4370ae8d7474316c91530a9b864be303f6c7abca5e9df6067b731dafc35105
- SHA512
  
  abd8813fc9dc153e93859247fc88363c4ad3a988b8545df375c900fbd6b6dbdf263faf572e9638fcb9114902b4b4ff5c886b6e9e54a0d74e5563aec36026e511
- SSDEEP
  
  384:FBT3P7eqnVjiMUXOkJAMYhFe9lvewJd0KkvBcHRb5s/0wAxzFkqmU1kKhOYZ:FB3j5ViOkJAMEylvjd0KIqHRb5DlFkqx
Score

8^/10

spyware stealer persistence
- Boot or Logon Autostart Execution: Port Monitors
  Adversaries may use port monitors to run an adversary supplied DLL during system boot for persistence or privilege escalation.
  persistence
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Port Monitors

Privilege Escalation

Boot or Logon Autostart Execution

Port Monitors

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

persistencespywarestealer