c3caae603c6c67509e14d1a70bb7b240858c4ac3a958e047eaaa9bfdd2eaf404 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fc7b745113b72d95e6db1c03b73773e_JaffaCakes118
Size

1005KB
Sample

240709-k7pfksweml
MD5

2fc7b745113b72d95e6db1c03b73773e
SHA1

009276dc32d653bcafd3b4d9c1da4619f58ce64a
SHA256

c3caae603c6c67509e14d1a70bb7b240858c4ac3a958e047eaaa9bfdd2eaf404
SHA512

ee050a6f0f0e5f3ff41a05683e67baf7babe6ed3d5d6749f8470ca202a431c34f4cb43a823f595ea52375a2276ba59e15c9c4774b678b8ad70b95830a5107b81
SSDEEP

12288:n+hYfYpcsB5k2XDSFWH4YLD1iKgN7lnLWzkwgNzRek18ysVwgM7JnoK6YKy8xHUz:npPYk2XGT8BQYkTAw8ysut7J6j01c0

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2fc7b745113b72d95e6db1c03b73773e_JaffaCakes118
- Size
  
  1005KB
- MD5
  
  2fc7b745113b72d95e6db1c03b73773e
- SHA1
  
  009276dc32d653bcafd3b4d9c1da4619f58ce64a
- SHA256
  
  c3caae603c6c67509e14d1a70bb7b240858c4ac3a958e047eaaa9bfdd2eaf404
- SHA512
  
  ee050a6f0f0e5f3ff41a05683e67baf7babe6ed3d5d6749f8470ca202a431c34f4cb43a823f595ea52375a2276ba59e15c9c4774b678b8ad70b95830a5107b81
- SSDEEP
  
  12288:n+hYfYpcsB5k2XDSFWH4YLD1iKgN7lnLWzkwgNzRek18ysVwgM7JnoK6YKy8xHUz:npPYk2XGT8BQYkTAw8ysut7J6j01c0
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2