35fcc24b76d4fa283774a738e22bc95e5b1f457edbcb117f12e40fa4f11ad2d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87d80fad3fba1043d9f664426692ee35_JaffaCakes118
Size

7.2MB
Sample

240810-1xyt9szfpq
MD5

87d80fad3fba1043d9f664426692ee35
SHA1

c8d9922ca843743e170ab3452333f04e00b1d361
SHA256

35fcc24b76d4fa283774a738e22bc95e5b1f457edbcb117f12e40fa4f11ad2d6
SHA512

6ab93b90a976f519d94d2cb049b910eebf440342e8aaeb2fcae3969cd375ec6b87104d7b17d58d3b41d0345fc02426c68057fc8cf0204182a89e7c1b09a0fdd6
SSDEEP

196608:chfx7nICteEroXxWVfEqlbkkwR7VTEJZFBuEuSLUAcx39Ix4ZV:inInEroXgfEqirRRoJZLruSI7F04

Score

7^/10

pyinstaller spyware stealer

Malware Config

Targets

- Target
  
  87d80fad3fba1043d9f664426692ee35_JaffaCakes118
- Size
  
  7.2MB
- MD5
  
  87d80fad3fba1043d9f664426692ee35
- SHA1
  
  c8d9922ca843743e170ab3452333f04e00b1d361
- SHA256
  
  35fcc24b76d4fa283774a738e22bc95e5b1f457edbcb117f12e40fa4f11ad2d6
- SHA512
  
  6ab93b90a976f519d94d2cb049b910eebf440342e8aaeb2fcae3969cd375ec6b87104d7b17d58d3b41d0345fc02426c68057fc8cf0204182a89e7c1b09a0fdd6
- SSDEEP
  
  196608:chfx7nICteEroXxWVfEqlbkkwR7VTEJZFBuEuSLUAcx39Ix4ZV:inInEroXgfEqirRRoJZLruSI7F04
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2