2d6b8a47659f802d0e4b2fc9c9d9861aab4f22c3c28c65715d5416558d48e025 | Triage

Sharing

General

Target

b7c212a87c92d41c8a450cb464be0b8a_JaffaCakes118
Size

1.7MB
Sample

240822-qd933sydlg
MD5

b7c212a87c92d41c8a450cb464be0b8a
SHA1

d61905790b1564bdf3cb5698b71a0802993ed6d9
SHA256

2d6b8a47659f802d0e4b2fc9c9d9861aab4f22c3c28c65715d5416558d48e025
SHA512

011a0eac5a45204aa76a6dfec64910d8e4a3541501dd8b1e8ae2dbf6c38f3ec6b1e802796d1c19219f60a373b965c390561427659228f7d5fb432b5995163870
SSDEEP

49152:W5dRvXojdvIdG4OcqabulkqRnR1cn7kPG4PenrUuotDUOYX:2dCjydG4T/C7n1cZnrMyOYX

Score

7^/10

aspackv2 discovery spyware stealer

Malware Config

Targets

- Target
  
  b7c212a87c92d41c8a450cb464be0b8a_JaffaCakes118
- Size
  
  1.7MB
- MD5
  
  b7c212a87c92d41c8a450cb464be0b8a
- SHA1
  
  d61905790b1564bdf3cb5698b71a0802993ed6d9
- SHA256
  
  2d6b8a47659f802d0e4b2fc9c9d9861aab4f22c3c28c65715d5416558d48e025
- SHA512
  
  011a0eac5a45204aa76a6dfec64910d8e4a3541501dd8b1e8ae2dbf6c38f3ec6b1e802796d1c19219f60a373b965c390561427659228f7d5fb432b5995163870
- SSDEEP
  
  49152:W5dRvXojdvIdG4OcqabulkqRnR1cn7kPG4PenrUuotDUOYX:2dCjydG4T/C7n1cZnrMyOYX
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer