739f5033de9c24e0eac42a1145c4a7e3a0f00d68fa9a64d578df86b767116fe0 | Triage

Sharing

General

Target

b35cbecd541ee0a6084bf77d5ccfb7c0_JaffaCakes118
Size

216KB
Sample

240821-n3wkwaxbpf
MD5

b35cbecd541ee0a6084bf77d5ccfb7c0
SHA1

7eea782353b9f310240a397f6662c073a4192147
SHA256

739f5033de9c24e0eac42a1145c4a7e3a0f00d68fa9a64d578df86b767116fe0
SHA512

1acd55ec774b515c08d8909e8a517a527976f126de57804beb332fbf63ba13dbb43c4a2ae095aa108da9f250333147f802851132cb13bb8bf01f27450c28eb6d
SSDEEP

6144:eqYuCNcXK4W/UhPcFG6UyhbX4tjRuV8TFJZwc:eqYAa4W/UhPeGiVyzRJZwc

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  b35cbecd541ee0a6084bf77d5ccfb7c0_JaffaCakes118
- Size
  
  216KB
- MD5
  
  b35cbecd541ee0a6084bf77d5ccfb7c0
- SHA1
  
  7eea782353b9f310240a397f6662c073a4192147
- SHA256
  
  739f5033de9c24e0eac42a1145c4a7e3a0f00d68fa9a64d578df86b767116fe0
- SHA512
  
  1acd55ec774b515c08d8909e8a517a527976f126de57804beb332fbf63ba13dbb43c4a2ae095aa108da9f250333147f802851132cb13bb8bf01f27450c28eb6d
- SSDEEP
  
  6144:eqYuCNcXK4W/UhPcFG6UyhbX4tjRuV8TFJZwc:eqYAa4W/UhPeGiVyzRJZwc
Score

7^/10

discovery spyware stealer
- Deletes itself
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer