1e942e5b91b23fce1f433ef62eab33ae5960e63303839d2e050a4acb2cbebd89 | Triage

Sharing

General

Target

684f35599d9fc1dc0f49c97dbd253027_JaffaCakes118
Size

591KB
Sample

240723-tv1gra1grb
MD5

684f35599d9fc1dc0f49c97dbd253027
SHA1

abf9dbf41a6b0b5770f938b2e0151c2efc755cea
SHA256

1e942e5b91b23fce1f433ef62eab33ae5960e63303839d2e050a4acb2cbebd89
SHA512

2c81491f166d5c5aedde5bd2d835cbbd372edf7227335e257aa7c4f55b4b394a76f3b49e3cdaf21a02e0c1c1a59ab78600d531c6647a2a70c9d0b13f9563624f
SSDEEP

12288:P862Oi5XQhEeZHauP0MbadCGA7yeREK14sCbWFL2oQ2PXVo8+:P862Oi5XQhEeZHNbadWye74sCbjm+

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  684f35599d9fc1dc0f49c97dbd253027_JaffaCakes118
- Size
  
  591KB
- MD5
  
  684f35599d9fc1dc0f49c97dbd253027
- SHA1
  
  abf9dbf41a6b0b5770f938b2e0151c2efc755cea
- SHA256
  
  1e942e5b91b23fce1f433ef62eab33ae5960e63303839d2e050a4acb2cbebd89
- SHA512
  
  2c81491f166d5c5aedde5bd2d835cbbd372edf7227335e257aa7c4f55b4b394a76f3b49e3cdaf21a02e0c1c1a59ab78600d531c6647a2a70c9d0b13f9563624f
- SSDEEP
  
  12288:P862Oi5XQhEeZHauP0MbadCGA7yeREK14sCbWFL2oQ2PXVo8+:P862Oi5XQhEeZHNbadWye74sCbjm+
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer