4fb3ecdf06550c6ae2a5c2816ba4e4d2397629ca06cb09f8a9faf10bb2bd68f5 | Triage

Sharing

General

Target

4174e87a532e2571147309c020afefce_JaffaCakes118
Size

140KB
Sample

240713-nfad5a1aqe
MD5

4174e87a532e2571147309c020afefce
SHA1

c2238033d825a24be3158e099cbeccfc98b15387
SHA256

4fb3ecdf06550c6ae2a5c2816ba4e4d2397629ca06cb09f8a9faf10bb2bd68f5
SHA512

b185e1e09b32cd68846209f48beae20b6e0e7607b1c5293581868f0a0a700b5e4508be631eadded98ecca5d56ab0f946e52df638b18f0ec5f2b2621b36b153f4
SSDEEP

1536:yXKMlbIt6zAUVrQb9jtR85oAqIJE0vM7jfIwZ6/0vorx/9GpVLkiV6yAsVr:yXKycCpQbh8Sb9SgB6qKchJV6yA

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  4174e87a532e2571147309c020afefce_JaffaCakes118
- Size
  
  140KB
- MD5
  
  4174e87a532e2571147309c020afefce
- SHA1
  
  c2238033d825a24be3158e099cbeccfc98b15387
- SHA256
  
  4fb3ecdf06550c6ae2a5c2816ba4e4d2397629ca06cb09f8a9faf10bb2bd68f5
- SHA512
  
  b185e1e09b32cd68846209f48beae20b6e0e7607b1c5293581868f0a0a700b5e4508be631eadded98ecca5d56ab0f946e52df638b18f0ec5f2b2621b36b153f4
- SSDEEP
  
  1536:yXKMlbIt6zAUVrQb9jtR85oAqIJE0vM7jfIwZ6/0vorx/9GpVLkiV6yAsVr:yXKycCpQbh8Sb9SgB6qKchJV6yA
Score

7^/10

spyware stealer
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2