95df712deffbc739b1ee385771823fac25356150d9f4bd62ea716fc19b35ac14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42c3e39b93d40e4aa3fef796cab658f7_JaffaCakes118
Size

1.1MB
Sample

240713-wnxtdstdld
MD5

42c3e39b93d40e4aa3fef796cab658f7
SHA1

90ad414b77cfb86ae0c37442cee33d36297cdb5d
SHA256

95df712deffbc739b1ee385771823fac25356150d9f4bd62ea716fc19b35ac14
SHA512

4889eba016ad0efa73554b65c9c8f9867a1fb4ae8d5c561a1cb8bef606873c3ea68790deba57035a8c856a792ab74b42857ba0c2b905fff397da3e7a582ad749
SSDEEP

24576:bQJSP96tATSZst9gI2phBG3wRcrW0vi2+Y8+aj6I2Mljb/pjdD4TjaX6UnDPAKl5:bQIPEtA4sH+hBCVieQJp4T2TnT

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  42c3e39b93d40e4aa3fef796cab658f7_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  42c3e39b93d40e4aa3fef796cab658f7
- SHA1
  
  90ad414b77cfb86ae0c37442cee33d36297cdb5d
- SHA256
  
  95df712deffbc739b1ee385771823fac25356150d9f4bd62ea716fc19b35ac14
- SHA512
  
  4889eba016ad0efa73554b65c9c8f9867a1fb4ae8d5c561a1cb8bef606873c3ea68790deba57035a8c856a792ab74b42857ba0c2b905fff397da3e7a582ad749
- SSDEEP
  
  24576:bQJSP96tATSZst9gI2phBG3wRcrW0vi2+Y8+aj6I2Mljb/pjdD4TjaX6UnDPAKl5:bQIPEtA4sH+hBCVieQJp4T2TnT
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2