08e575202df74aefb5ec14e1a9138eaf2e09734a496d2bebc926e6fd35cbe4d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a41d744a48675b00b6d61a476d2e0dbe_JaffaCakes118
Size

1.0MB
Sample

240817-zqhzssyhjk
MD5

a41d744a48675b00b6d61a476d2e0dbe
SHA1

9181722bc08f91b54aea4dba0814cce2b59ee3c2
SHA256

08e575202df74aefb5ec14e1a9138eaf2e09734a496d2bebc926e6fd35cbe4d2
SHA512

f9b394792bfa9d481abb72b9cbfb0002ce4fe7c484b0778d78f9017aaa184877bb833ce240147920f166375eeb64979554fe96894a3115b5b6db258aec104b67
SSDEEP

24576:9Yz5+D3zBh/Mnp1UCZX4HeMC26+ENoBIZTSX7CBpfx7:9PHT/MngCZX4H1CwEWmTS2BpZ

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  a41d744a48675b00b6d61a476d2e0dbe_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  a41d744a48675b00b6d61a476d2e0dbe
- SHA1
  
  9181722bc08f91b54aea4dba0814cce2b59ee3c2
- SHA256
  
  08e575202df74aefb5ec14e1a9138eaf2e09734a496d2bebc926e6fd35cbe4d2
- SHA512
  
  f9b394792bfa9d481abb72b9cbfb0002ce4fe7c484b0778d78f9017aaa184877bb833ce240147920f166375eeb64979554fe96894a3115b5b6db258aec104b67
- SSDEEP
  
  24576:9Yz5+D3zBh/Mnp1UCZX4HeMC26+ENoBIZTSX7CBpfx7:9PHT/MngCZX4H1CwEWmTS2BpZ
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer