75e136875d63f9aa51ba30b17e45a21421bff5d8dab558a46b560f82bf48cae3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9269b71fffd7bda6e5ab52f56c72063_JaffaCakes118
Size

8.7MB
Sample

240829-thy36azcqe
MD5

c9269b71fffd7bda6e5ab52f56c72063
SHA1

5a370e713f8214d7a0a4d7cf8a896a3d1ddcaa0a
SHA256

75e136875d63f9aa51ba30b17e45a21421bff5d8dab558a46b560f82bf48cae3
SHA512

1cba7738368bfb5676aac907e235d8b34e243097b8db6e9f2191b692c7b15629e97088c8d2ab034f0cc641a88e8d936b1d76ce6f630090e38c242b8d4208efdb
SSDEEP

196608:TucH239IdGGgjjW9DrCSgDMPeKEMw6G0I7HlokjBz6vp+:TtC9IJjDaDMPeCw6G0IRJlz6vQ

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c9269b71fffd7bda6e5ab52f56c72063_JaffaCakes118
- Size
  
  8.7MB
- MD5
  
  c9269b71fffd7bda6e5ab52f56c72063
- SHA1
  
  5a370e713f8214d7a0a4d7cf8a896a3d1ddcaa0a
- SHA256
  
  75e136875d63f9aa51ba30b17e45a21421bff5d8dab558a46b560f82bf48cae3
- SHA512
  
  1cba7738368bfb5676aac907e235d8b34e243097b8db6e9f2191b692c7b15629e97088c8d2ab034f0cc641a88e8d936b1d76ce6f630090e38c242b8d4208efdb
- SSDEEP
  
  196608:TucH239IdGGgjjW9DrCSgDMPeKEMw6G0I7HlokjBz6vp+:TtC9IJjDaDMPeCw6G0IRJlz6vQ
Score

7^/10

discovery spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer