afaa1deb809c829ebe13b0fc0a578604b8644578f564a0688bc2925635edc323 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3410a9bf51fdff2d72cffda73ae0ac8e_JaffaCakes118
Size

1.0MB
Sample

240710-kwn1nszhph
MD5

3410a9bf51fdff2d72cffda73ae0ac8e
SHA1

c0fa1e8a741402af3de98a54146c0b5ee5f1896b
SHA256

afaa1deb809c829ebe13b0fc0a578604b8644578f564a0688bc2925635edc323
SHA512

2af8d2e233b85f87543852854edf3f5ce5ccdb6221daece6c7896440aa887c947d620cf5c752bebddcf68c278c027d7e9f0db38b1d6722f11379001b6f2fca3d
SSDEEP

24576:LsSXtCK7/VosEFgaE8eW0NsrK908QARTl7Dm4fTX:QitCItojFgz8eW0nLQARTNKY

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  3410a9bf51fdff2d72cffda73ae0ac8e_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  3410a9bf51fdff2d72cffda73ae0ac8e
- SHA1
  
  c0fa1e8a741402af3de98a54146c0b5ee5f1896b
- SHA256
  
  afaa1deb809c829ebe13b0fc0a578604b8644578f564a0688bc2925635edc323
- SHA512
  
  2af8d2e233b85f87543852854edf3f5ce5ccdb6221daece6c7896440aa887c947d620cf5c752bebddcf68c278c027d7e9f0db38b1d6722f11379001b6f2fca3d
- SSDEEP
  
  24576:LsSXtCK7/VosEFgaE8eW0NsrK908QARTl7Dm4fTX:QitCItojFgz8eW0nLQARTNKY
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2