ef176dc0efb30c6cacb226aed0281bb8bc115ff89e9cc915ed29744c10824333 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b53cd70914166325fbab1295437733f3_JaffaCakes118
Size

330KB
Sample

240821-13dfhstbnf
MD5

b53cd70914166325fbab1295437733f3
SHA1

abf12342b2d455c5cb5eb2772e96d89fda8289c9
SHA256

ef176dc0efb30c6cacb226aed0281bb8bc115ff89e9cc915ed29744c10824333
SHA512

a9f0de06ac48d76e39b5e431fe5697362b21e901b5b1dd3403e0d227e1a8130f95353296962be2d3f579152278ecb168adedd8386bf3419019a0a3d5e648ac52
SSDEEP

6144:lvzoI7pR2lcppC12OKJo4qoeVMF4y/gxxwx8qwZjirzyulhOv:lvdiUpC12OXtA4XnwxJwViZlEv

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  b53cd70914166325fbab1295437733f3_JaffaCakes118
- Size
  
  330KB
- MD5
  
  b53cd70914166325fbab1295437733f3
- SHA1
  
  abf12342b2d455c5cb5eb2772e96d89fda8289c9
- SHA256
  
  ef176dc0efb30c6cacb226aed0281bb8bc115ff89e9cc915ed29744c10824333
- SHA512
  
  a9f0de06ac48d76e39b5e431fe5697362b21e901b5b1dd3403e0d227e1a8130f95353296962be2d3f579152278ecb168adedd8386bf3419019a0a3d5e648ac52
- SSDEEP
  
  6144:lvzoI7pR2lcppC12OKJo4qoeVMF4y/gxxwx8qwZjirzyulhOv:lvdiUpC12OXtA4XnwxJwViZlEv
Score

7^/10

discovery spyware stealer
- Deletes itself
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer