0b2149f8d52a4c54f63cff2a17b87516fe3b7df853ef8569977ece93444c5b4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43696e22de66f6e4a5e0649ea29c6ac1_JaffaCakes118
Size

1.0MB
Sample

240713-1bxebazfpc
MD5

43696e22de66f6e4a5e0649ea29c6ac1
SHA1

30ac1c172556c3d31ca41e8818b318726bd54d40
SHA256

0b2149f8d52a4c54f63cff2a17b87516fe3b7df853ef8569977ece93444c5b4f
SHA512

daa09d7986d0e111ee797d0c7fe50a4878fc53f5171db2e41f721d878c4b0c05181a33d600a5b0da54cfc772544564f7453abff424067c64e28899875aca1861
SSDEEP

24576:hsSXtCK7/VoseFggLceW0Nsr1EQ8QARTFhDkwXyHgQ:qitCItolFgqceW0B/QARTjrXl

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  43696e22de66f6e4a5e0649ea29c6ac1_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  43696e22de66f6e4a5e0649ea29c6ac1
- SHA1
  
  30ac1c172556c3d31ca41e8818b318726bd54d40
- SHA256
  
  0b2149f8d52a4c54f63cff2a17b87516fe3b7df853ef8569977ece93444c5b4f
- SHA512
  
  daa09d7986d0e111ee797d0c7fe50a4878fc53f5171db2e41f721d878c4b0c05181a33d600a5b0da54cfc772544564f7453abff424067c64e28899875aca1861
- SSDEEP
  
  24576:hsSXtCK7/VoseFggLceW0Nsr1EQ8QARTFhDkwXyHgQ:qitCItolFgqceW0B/QARTjrXl
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2