eb9c6048ab5998d3f91c70dab2e615f673daebf3b60463f420b41094d29387b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73dcc83923a8c8c5239eff5ae4e57627_JaffaCakes118
Size

224KB
Sample

240726-nllz4svdnn
MD5

73dcc83923a8c8c5239eff5ae4e57627
SHA1

711dad7f0003b9e91616a29dc1e21ab2631bdc25
SHA256

eb9c6048ab5998d3f91c70dab2e615f673daebf3b60463f420b41094d29387b3
SHA512

9e91e5b75c9744e78dbefef97ccda0d45aeae07002743c5149abb7ae51e67c6259d96249e9fbf6ff8f8047a52a59e9f8d1602972d7162766849b2193926ca841
SSDEEP

3072:RTaZLMlvaub4if/1TcNeyIr3v//sAfuY2wHc1PorRyFEtrLs6SWxMmxmEqVhfxx5:RTd4i3xcNdIrEejCEJ3fqDVNYm3p1F

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  73dcc83923a8c8c5239eff5ae4e57627_JaffaCakes118
- Size
  
  224KB
- MD5
  
  73dcc83923a8c8c5239eff5ae4e57627
- SHA1
  
  711dad7f0003b9e91616a29dc1e21ab2631bdc25
- SHA256
  
  eb9c6048ab5998d3f91c70dab2e615f673daebf3b60463f420b41094d29387b3
- SHA512
  
  9e91e5b75c9744e78dbefef97ccda0d45aeae07002743c5149abb7ae51e67c6259d96249e9fbf6ff8f8047a52a59e9f8d1602972d7162766849b2193926ca841
- SSDEEP
  
  3072:RTaZLMlvaub4if/1TcNeyIr3v//sAfuY2wHc1PorRyFEtrLs6SWxMmxmEqVhfxx5:RTd4i3xcNdIrEejCEJ3fqDVNYm3p1F
Score

7^/10

discovery spyware stealer
- Deletes itself
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer