3a6343dbde12808aa4d0169c9ffff12ca28ee992f42b729a9a00654e3c373b2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdd7d45baa16d584970442271dc23513_JaffaCakes118
Size

1.1MB
Sample

240929-fmnlbs1bmr
MD5

fdd7d45baa16d584970442271dc23513
SHA1

737593a9f908b64b30938aa202a93a36df1a5065
SHA256

3a6343dbde12808aa4d0169c9ffff12ca28ee992f42b729a9a00654e3c373b2c
SHA512

731c3fa598f83684e4bb9709ea955c6a27226cf1d8846c7955203221963d1b28fd05c39ae17bba937b7e029e19f019e0822e0ac1903d5b3fe921183c15353688
SSDEEP

24576:6lDeXJO9S/jXUB7ySlqA774hjs2QLfabllKl6U5VASTG3lAP:6lsKSDUB+SlqA7Si7Vwa

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  fdd7d45baa16d584970442271dc23513_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  fdd7d45baa16d584970442271dc23513
- SHA1
  
  737593a9f908b64b30938aa202a93a36df1a5065
- SHA256
  
  3a6343dbde12808aa4d0169c9ffff12ca28ee992f42b729a9a00654e3c373b2c
- SHA512
  
  731c3fa598f83684e4bb9709ea955c6a27226cf1d8846c7955203221963d1b28fd05c39ae17bba937b7e029e19f019e0822e0ac1903d5b3fe921183c15353688
- SSDEEP
  
  24576:6lDeXJO9S/jXUB7ySlqA774hjs2QLfabllKl6U5VASTG3lAP:6lsKSDUB+SlqA7Si7Vwa
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer