387ce8051d7b91e7894de77b7fce87c5808159df8aa8598c14b02f57a16509d3 | Triage

Sharing

General

Target

d23603d32a7ac7c27143bf42eb2bc402_JaffaCakes118
Size

367KB
Sample

240907-sfy5pszblm
MD5

d23603d32a7ac7c27143bf42eb2bc402
SHA1

765bd6a3ef984631db11c72a5df54553ec8b2941
SHA256

387ce8051d7b91e7894de77b7fce87c5808159df8aa8598c14b02f57a16509d3
SHA512

9420df016f7cd80148727e578114847419510733417fe90913bdbf11519633e0d9964507a425dd702fe9cd32296fe3c855507a7d1388e9456a961f34f72676f7
SSDEEP

6144:8eGBvqLpN1XAmrgKj+g+2Gkp6rKk3QOOwu19sQIScfFei+n9HO8sY/lBDr7:8DtqLpNVz5qgXGr2319sQ1cf3+n9ug/j

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  d23603d32a7ac7c27143bf42eb2bc402_JaffaCakes118
- Size
  
  367KB
- MD5
  
  d23603d32a7ac7c27143bf42eb2bc402
- SHA1
  
  765bd6a3ef984631db11c72a5df54553ec8b2941
- SHA256
  
  387ce8051d7b91e7894de77b7fce87c5808159df8aa8598c14b02f57a16509d3
- SHA512
  
  9420df016f7cd80148727e578114847419510733417fe90913bdbf11519633e0d9964507a425dd702fe9cd32296fe3c855507a7d1388e9456a961f34f72676f7
- SSDEEP
  
  6144:8eGBvqLpN1XAmrgKj+g+2Gkp6rKk3QOOwu19sQIScfFei+n9HO8sY/lBDr7:8DtqLpNVz5qgXGr2319sQ1cf3+n9ug/j
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Network Share Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2