8a433bb6e2a85640dd490856f090b3c4ba8257afa4ed44c2a5d95006d67bd6a2 | Triage

Sharing

General

Target

d517eff756f55a5ceaa248e8ab118326_JaffaCakes118
Size

1.0MB
Sample

240908-zz242avgrm
MD5

d517eff756f55a5ceaa248e8ab118326
SHA1

c7af3b37c5e63a673a536d754a66f4d1242cd5b1
SHA256

8a433bb6e2a85640dd490856f090b3c4ba8257afa4ed44c2a5d95006d67bd6a2
SHA512

ce10234e6f750e5880fcef0ba5345df21fd6a4476a96e76eef297be0a9e5985f7737eefc696b0df79354c9c31e413a77ed5b58c192db35620698d653bf8efd46
SSDEEP

24576:YvkQhyUP8bdh3jCUSpZfRgb8NflG6lNp+4NXS8WFPgTDOsWQdxDwsOmefp:2kQrP8P3GUSpVcKflFYIS8WJcisNTD+b

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  d517eff756f55a5ceaa248e8ab118326_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  d517eff756f55a5ceaa248e8ab118326
- SHA1
  
  c7af3b37c5e63a673a536d754a66f4d1242cd5b1
- SHA256
  
  8a433bb6e2a85640dd490856f090b3c4ba8257afa4ed44c2a5d95006d67bd6a2
- SHA512
  
  ce10234e6f750e5880fcef0ba5345df21fd6a4476a96e76eef297be0a9e5985f7737eefc696b0df79354c9c31e413a77ed5b58c192db35620698d653bf8efd46
- SSDEEP
  
  24576:YvkQhyUP8bdh3jCUSpZfRgb8NflG6lNp+4NXS8WFPgTDOsWQdxDwsOmefp:2kQrP8P3GUSpVcKflFYIS8WJcisNTD+b
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer