e541e1de3304feb9b51b252041b69e5b84864ec4b77fd119c0e61e9bb931a2f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

622a13a7b5239b918f30c3836330de25_JaffaCakes118
Size

1005KB
Sample

240722-betp6atdre
MD5

622a13a7b5239b918f30c3836330de25
SHA1

75fdfc6fe5c753f688dcaa8bc3cb2bb42aca253f
SHA256

e541e1de3304feb9b51b252041b69e5b84864ec4b77fd119c0e61e9bb931a2f5
SHA512

54d9d780dcd3b1c0745ce3f80999608aafb8ba32d1693ef94aae7559896c3c5b463d1f19cef5a18a3dbf3c719dd89e8c67ed754078faf85f0ee9631b686b885a
SSDEEP

24576:zyKAuOGVZ8XqO+J6Tn/OLPS2mvn0EAjU+Rs6Ft4HM8uBa:eKzOGoXqO+ETntHpyUysK8

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  622a13a7b5239b918f30c3836330de25_JaffaCakes118
- Size
  
  1005KB
- MD5
  
  622a13a7b5239b918f30c3836330de25
- SHA1
  
  75fdfc6fe5c753f688dcaa8bc3cb2bb42aca253f
- SHA256
  
  e541e1de3304feb9b51b252041b69e5b84864ec4b77fd119c0e61e9bb931a2f5
- SHA512
  
  54d9d780dcd3b1c0745ce3f80999608aafb8ba32d1693ef94aae7559896c3c5b463d1f19cef5a18a3dbf3c719dd89e8c67ed754078faf85f0ee9631b686b885a
- SSDEEP
  
  24576:zyKAuOGVZ8XqO+J6Tn/OLPS2mvn0EAjU+Rs6Ft4HM8uBa:eKzOGoXqO+ETntHpyUysK8
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2