67b4b6934fbb43c5b8b04d73c77b4a29d5308c0dfdeb832d887b1cd6fe07c466 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72938a4205dd224e812051c67252373a_JaffaCakes118
Size

1.1MB
Sample

240726-e1kwxswejr
MD5

72938a4205dd224e812051c67252373a
SHA1

59dddbc0de9a1e6a85a850d697d7d009376de033
SHA256

67b4b6934fbb43c5b8b04d73c77b4a29d5308c0dfdeb832d887b1cd6fe07c466
SHA512

03aa56d7f07ef07a3f8faa6391afd08e60b205793cfe40d845839440f5bff092d2671678e4c15c89312b0bc59fe421d0199dc865b441c37608be3dc58cd2b0d2
SSDEEP

24576:mgwf5uVfrM8z8s5KbmlhMfpkYHw9NTMtyqlz+Rw/9:mgG5uVAM88Kbmlhahw9NTeyqmw

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  72938a4205dd224e812051c67252373a_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  72938a4205dd224e812051c67252373a
- SHA1
  
  59dddbc0de9a1e6a85a850d697d7d009376de033
- SHA256
  
  67b4b6934fbb43c5b8b04d73c77b4a29d5308c0dfdeb832d887b1cd6fe07c466
- SHA512
  
  03aa56d7f07ef07a3f8faa6391afd08e60b205793cfe40d845839440f5bff092d2671678e4c15c89312b0bc59fe421d0199dc865b441c37608be3dc58cd2b0d2
- SSDEEP
  
  24576:mgwf5uVfrM8z8s5KbmlhMfpkYHw9NTMtyqlz+Rw/9:mgG5uVAM88Kbmlhahw9NTeyqmw
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer