b83d2be737fea5f20854e9d2e5b0053bf191447b29c6d2d1bc02944a2971dccd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adf4a99b9fe5a3645ed4208d27a0bfac_JaffaCakes118
Size

1.6MB
Sample

240820-fqegtsybpp
MD5

adf4a99b9fe5a3645ed4208d27a0bfac
SHA1

6f1d3dae503540c6377d43482bfe6492ceb8bf01
SHA256

b83d2be737fea5f20854e9d2e5b0053bf191447b29c6d2d1bc02944a2971dccd
SHA512

88e295a0e7758193ff4365a12156b70ee87ff58efd41f4d49375ef1bdee5d255657f4a82d69b1449c3c13aab2ca6a2b1db031fc518b71d4fa9b45e1d37c385f8
SSDEEP

49152:vHf9VQRRqvelYDVPddMgGuL83/YfTqPrt:vlVSgdDJM3w2

Score

7^/10

discovery evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  adf4a99b9fe5a3645ed4208d27a0bfac_JaffaCakes118
- Size
  
  1.6MB
- MD5
  
  adf4a99b9fe5a3645ed4208d27a0bfac
- SHA1
  
  6f1d3dae503540c6377d43482bfe6492ceb8bf01
- SHA256
  
  b83d2be737fea5f20854e9d2e5b0053bf191447b29c6d2d1bc02944a2971dccd
- SHA512
  
  88e295a0e7758193ff4365a12156b70ee87ff58efd41f4d49375ef1bdee5d255657f4a82d69b1449c3c13aab2ca6a2b1db031fc518b71d4fa9b45e1d37c385f8
- SSDEEP
  
  49152:vHf9VQRRqvelYDVPddMgGuL83/YfTqPrt:vlVSgdDJM3w2
Score

7^/10

discovery evasion spyware stealer trojan
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionspywarestealertrojan

behavioral2

discoveryspywarestealer