4068daf82f84be061e851ca2f05bcf102110a4b6f9d9e203e57a9ae5fc377ae2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94ed026eb2c785c816712f2459035345_JaffaCakes118
Size

212KB
Sample

240813-1153ratbqm
MD5

94ed026eb2c785c816712f2459035345
SHA1

602c031b51876bfe46a5817c6cc1883a41335930
SHA256

4068daf82f84be061e851ca2f05bcf102110a4b6f9d9e203e57a9ae5fc377ae2
SHA512

94bc84b855a8e99390e5a43238af685702b36062b01af35ddfe9cff57fa81c8e161725f6810569aca5117f1e60e43252a5c830dc51f0a7d631b3a1b55b38f0fe
SSDEEP

3072:Qs/0nA1XRS6VIeCyIarUwv1+SfYh17on7ekKOAoqsihPZNhgfZxE:yuw6NuaQwNjk7onSxO7qsCPZNhgRa

Score

7^/10

collection discovery spyware stealer

Malware Config

Targets

- Target
  
  94ed026eb2c785c816712f2459035345_JaffaCakes118
- Size
  
  212KB
- MD5
  
  94ed026eb2c785c816712f2459035345
- SHA1
  
  602c031b51876bfe46a5817c6cc1883a41335930
- SHA256
  
  4068daf82f84be061e851ca2f05bcf102110a4b6f9d9e203e57a9ae5fc377ae2
- SHA512
  
  94bc84b855a8e99390e5a43238af685702b36062b01af35ddfe9cff57fa81c8e161725f6810569aca5117f1e60e43252a5c830dc51f0a7d631b3a1b55b38f0fe
- SSDEEP
  
  3072:Qs/0nA1XRS6VIeCyIarUwv1+SfYh17on7ekKOAoqsihPZNhgfZxE:yuw6NuaQwNjk7onSxO7qsCPZNhgRa
Score

7^/10

collection discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectiondiscoveryspywarestealer

behavioral2

discoveryspywarestealer