bcf4d9bf0c68ce1bba959ef901fa9ed225af4d922aeb2032663975377e59176a | Triage

Sharing

General

Target

bf608a87faa84166fe27cbb7000a3a92_JaffaCakes118
Size

56KB
Sample

240824-zlgk6sydnf
MD5

bf608a87faa84166fe27cbb7000a3a92
SHA1

b9eae3631187158d52ef64729a530e9925252b78
SHA256

bcf4d9bf0c68ce1bba959ef901fa9ed225af4d922aeb2032663975377e59176a
SHA512

2365318f2acdaba53dd8629b2c562e93a08ad5f4149df8abdd77d0c70711408b8154c5d9c4798467627ab7bf71b2acd764b72cea1c55035ffedf764e1e13faaa
SSDEEP

1536:2oESKCo5uSKeg1EBCdoB6WwAZkK9cmmr5Tjx:fESKCo5+i6Ww/Tjx

Score

9^/10

credential_access discovery stealer

Malware Config

Targets

- Target
  
  bf608a87faa84166fe27cbb7000a3a92_JaffaCakes118
- Size
  
  56KB
- MD5
  
  bf608a87faa84166fe27cbb7000a3a92
- SHA1
  
  b9eae3631187158d52ef64729a530e9925252b78
- SHA256
  
  bcf4d9bf0c68ce1bba959ef901fa9ed225af4d922aeb2032663975377e59176a
- SHA512
  
  2365318f2acdaba53dd8629b2c562e93a08ad5f4149df8abdd77d0c70711408b8154c5d9c4798467627ab7bf71b2acd764b72cea1c55035ffedf764e1e13faaa
- SSDEEP
  
  1536:2oESKCo5uSKeg1EBCdoB6WwAZkK9cmmr5Tjx:fESKCo5+i6Ww/Tjx
Score

9^/10

credential_access discovery stealer
- Credentials from Password Stores: Credentials from Web Browsers
  Malicious Access or copy of Web Browser Credential store.
  credential_access stealer
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Windows Credential Manager

Discovery

Browser Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

credential_accessdiscoverystealer

behavioral2