a7f23d26502d69fb5fda9241d24e71808f5d61042843975cd34882339524f05e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b06432fbfb9c3f632dd8843d720ec6fb_JaffaCakes118
Size

1.0MB
Sample

240820-xcqrda1erq
MD5

b06432fbfb9c3f632dd8843d720ec6fb
SHA1

b93dab120d934035612333bfdd88070cc0ecbeae
SHA256

a7f23d26502d69fb5fda9241d24e71808f5d61042843975cd34882339524f05e
SHA512

343cc2eb5287ca325193559d72117cd110b6c26d5080088bb3c3ac1e6f60647250ee59c428a5ec66514b54924e889f2b00b3980b35aba9c5d775d9541fce152c
SSDEEP

24576:csSXtCK7/VosPFgVmAeW0NsrCmC8QARTkEZgtuA42v53r:9itCItocFg8AeW0EtQARTPugU

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  b06432fbfb9c3f632dd8843d720ec6fb_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  b06432fbfb9c3f632dd8843d720ec6fb
- SHA1
  
  b93dab120d934035612333bfdd88070cc0ecbeae
- SHA256
  
  a7f23d26502d69fb5fda9241d24e71808f5d61042843975cd34882339524f05e
- SHA512
  
  343cc2eb5287ca325193559d72117cd110b6c26d5080088bb3c3ac1e6f60647250ee59c428a5ec66514b54924e889f2b00b3980b35aba9c5d775d9541fce152c
- SSDEEP
  
  24576:csSXtCK7/VosPFgVmAeW0NsrCmC8QARTkEZgtuA42v53r:9itCItocFg8AeW0EtQARTPugU
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer