4f6bc0019b51f2fa6eb9ddb83860d35196a34e51db24706a9f8d42c3821ed438 | Triage

Sharing

General

Target

a51563747130d0795c8f53fe3f12f9ae_JaffaCakes118
Size

33KB
Sample

240818-c84b5a1djg
MD5

a51563747130d0795c8f53fe3f12f9ae
SHA1

e930abaf1331f97a497dc7d6088154906541869b
SHA256

4f6bc0019b51f2fa6eb9ddb83860d35196a34e51db24706a9f8d42c3821ed438
SHA512

388747aea615f512fe2102b222b6d1023a9978feeb2b3491db7f140fbf7738b2997792a20e7a7d4309efa84b436b54468c5826d5501d9a447851b538f9d40b97
SSDEEP

768:I0X7HC9hO5RroZJ767395uINnEfDKBbUCp1OTZ+/V:Ici9he+Zk77RNzLiTO

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  a51563747130d0795c8f53fe3f12f9ae_JaffaCakes118
- Size
  
  33KB
- MD5
  
  a51563747130d0795c8f53fe3f12f9ae
- SHA1
  
  e930abaf1331f97a497dc7d6088154906541869b
- SHA256
  
  4f6bc0019b51f2fa6eb9ddb83860d35196a34e51db24706a9f8d42c3821ed438
- SHA512
  
  388747aea615f512fe2102b222b6d1023a9978feeb2b3491db7f140fbf7738b2997792a20e7a7d4309efa84b436b54468c5826d5501d9a447851b538f9d40b97
- SSDEEP
  
  768:I0X7HC9hO5RroZJ767395uINnEfDKBbUCp1OTZ+/V:Ici9he+Zk77RNzLiTO
Score

7^/10

discovery spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer