0770078be35956187214dc230b73c071c470c3919e4833c61ccb83957bc2fba3 | Triage

Sharing

General

Target

73ea4845e696b1fa2e04eb3339a677b0_JaffaCakes118
Size

2.6MB
Sample

240726-nwtgyayhqe
MD5

73ea4845e696b1fa2e04eb3339a677b0
SHA1

cb985e4678a6f99b36ad0e12088ee0796201f288
SHA256

0770078be35956187214dc230b73c071c470c3919e4833c61ccb83957bc2fba3
SHA512

01038ab3476849069526a9b49c3c12ffc504fe25e4d78101cf073c700f85a204f42a62ef21b11115856aba231537b8ee482d14b82de2c222d0dd68ae38589680
SSDEEP

24576:BDaxQtEs+3N6q4H7ZQtUtPKsDLKxKeLr9/31ZzCuocrfw:dWQtAPoFQ2ksDmAe/t31ZZE

Score

7^/10

collection discovery spyware stealer

Malware Config

Targets

- Target
  
  73ea4845e696b1fa2e04eb3339a677b0_JaffaCakes118
- Size
  
  2.6MB
- MD5
  
  73ea4845e696b1fa2e04eb3339a677b0
- SHA1
  
  cb985e4678a6f99b36ad0e12088ee0796201f288
- SHA256
  
  0770078be35956187214dc230b73c071c470c3919e4833c61ccb83957bc2fba3
- SHA512
  
  01038ab3476849069526a9b49c3c12ffc504fe25e4d78101cf073c700f85a204f42a62ef21b11115856aba231537b8ee482d14b82de2c222d0dd68ae38589680
- SSDEEP
  
  24576:BDaxQtEs+3N6q4H7ZQtUtPKsDLKxKeLr9/31ZzCuocrfw:dWQtAPoFQ2ksDmAe/t31ZZE
Score

7^/10

collection discovery spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectiondiscoveryspywarestealer

behavioral2

collectiondiscoveryspywarestealer