94aca21f358054a687f71cde0296566ac57ae4126e523c64c0e9c0d138b88e1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1b666f900740b97916c45f18d8807c8_JaffaCakes118
Size

219KB
Sample

240907-mfpndaygnj
MD5

d1b666f900740b97916c45f18d8807c8
SHA1

911683c1e172206d53dfe011a71e2473f0250565
SHA256

94aca21f358054a687f71cde0296566ac57ae4126e523c64c0e9c0d138b88e1e
SHA512

f9911d64f40f1aa7104ea50a20aef5f9f1fdecb0fd0e98eae93c230e839b5de19967193f1d7503bbb5a9463cc462fac0f7596ce098decf2a8f303d54dfcc7b9f
SSDEEP

3072:hjzkYGqQadOb987H1YZ7semLOAs0vrHFd0VxnqqNJ/PHB2Oyh2GZO5LAs7IagIJO:hjzpNQWO+7G8OAGDzBPIZKgIJ2D

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  d1b666f900740b97916c45f18d8807c8_JaffaCakes118
- Size
  
  219KB
- MD5
  
  d1b666f900740b97916c45f18d8807c8
- SHA1
  
  911683c1e172206d53dfe011a71e2473f0250565
- SHA256
  
  94aca21f358054a687f71cde0296566ac57ae4126e523c64c0e9c0d138b88e1e
- SHA512
  
  f9911d64f40f1aa7104ea50a20aef5f9f1fdecb0fd0e98eae93c230e839b5de19967193f1d7503bbb5a9463cc462fac0f7596ce098decf2a8f303d54dfcc7b9f
- SSDEEP
  
  3072:hjzkYGqQadOb987H1YZ7semLOAs0vrHFd0VxnqqNJ/PHB2Oyh2GZO5LAs7IagIJO:hjzpNQWO+7G8OAGDzBPIZKgIJ2D
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Network Share Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer