1cd22807ab2f065b54d8c9515b61b5c2463bf6e62c8fb518a875d140faa7ce68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b907d671c586e292e4fedabaae0bf827_JaffaCakes118
Size

80KB
Sample

240822-y6r2zayfkl
MD5

b907d671c586e292e4fedabaae0bf827
SHA1

238ee16dc4342e2826212f27f7ca004511aaec10
SHA256

1cd22807ab2f065b54d8c9515b61b5c2463bf6e62c8fb518a875d140faa7ce68
SHA512

27064caf42f82f3019102f670e42db6d4154ee4c3bef6cfc316fa08a540bc8dbd423722442bb639551f8bfab92576cd44a60ca97149f5efd188ef1e4ba1f273d
SSDEEP

1536:AeiPQKrSOtii6Kq6qOWG2mWGwepVeARuI9QPNs:dKrSOtii6jepVlRu4

Score

8^/10

discovery evasion persistence spyware stealer

Malware Config

Targets

- Target
  
  b907d671c586e292e4fedabaae0bf827_JaffaCakes118
- Size
  
  80KB
- MD5
  
  b907d671c586e292e4fedabaae0bf827
- SHA1
  
  238ee16dc4342e2826212f27f7ca004511aaec10
- SHA256
  
  1cd22807ab2f065b54d8c9515b61b5c2463bf6e62c8fb518a875d140faa7ce68
- SHA512
  
  27064caf42f82f3019102f670e42db6d4154ee4c3bef6cfc316fa08a540bc8dbd423722442bb639551f8bfab92576cd44a60ca97149f5efd188ef1e4ba1f273d
- SSDEEP
  
  1536:AeiPQKrSOtii6Kq6qOWG2mWGwepVeARuI9QPNs:dKrSOtii6jepVlRu4
Score

8^/10

discovery evasion persistence spyware stealer
- Disables RegEdit via registry modification
  evasion
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencespywarestealer

behavioral2

discoveryevasionpersistencespywarestealer