490ef82b7bc63d8635ae77507be2f664b57ca692479666325b96992e26d50c5e | Triage

Sharing

General

Target

86366f2b444ec27067c0dde314e98914_JaffaCakes118
Size

217KB
Sample

240810-ql23fa1cnk
MD5

86366f2b444ec27067c0dde314e98914
SHA1

260930170445803fcc8e1440ab194e555cfcb5c4
SHA256

490ef82b7bc63d8635ae77507be2f664b57ca692479666325b96992e26d50c5e
SHA512

e1142fa6f10a6ceafb13c111c716bf5d1b2d21213dc3e9286a5a1e2cb1580e1833edfdc5c51dfcd773a68f37c80ae2424dddec6f8a6ebf82b646f7c58fa853cf
SSDEEP

3072:MHJKVTsZ8LdFtGDVAVdxcpibt50zev8eqarSxtNpZfMLzsjkN74qdZou915wtfU2:MKbPifx5ZkLzsy74q0bU

Score

7^/10

discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  86366f2b444ec27067c0dde314e98914_JaffaCakes118
- Size
  
  217KB
- MD5
  
  86366f2b444ec27067c0dde314e98914
- SHA1
  
  260930170445803fcc8e1440ab194e555cfcb5c4
- SHA256
  
  490ef82b7bc63d8635ae77507be2f664b57ca692479666325b96992e26d50c5e
- SHA512
  
  e1142fa6f10a6ceafb13c111c716bf5d1b2d21213dc3e9286a5a1e2cb1580e1833edfdc5c51dfcd773a68f37c80ae2424dddec6f8a6ebf82b646f7c58fa853cf
- SSDEEP
  
  3072:MHJKVTsZ8LdFtGDVAVdxcpibt50zev8eqarSxtNpZfMLzsjkN74qdZou915wtfU2:MKbPifx5ZkLzsy74q0bU
Score

7^/10

discovery persistence spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealer

behavioral2

discoveryspywarestealer