67e09012b104a8df2a0a3ca3ce7ccf04007400727e892bb200d3734d0e602bc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe0cbcda43f85e76aa034e0ce50138a8_JaffaCakes118
Size

1.3MB
Sample

240929-h9bamavblq
MD5

fe0cbcda43f85e76aa034e0ce50138a8
SHA1

23b0d8bad9fa2d51c58922b2c90e8c63ad2a6186
SHA256

67e09012b104a8df2a0a3ca3ce7ccf04007400727e892bb200d3734d0e602bc9
SHA512

abbef58f1aae2421c1b3a0ee6ef7b730307358b332bb38f9eff932bef51b23ab16ff71f4f214a43f642cacaecad48d5d44624c752fb9a4cd5c971ff5887b67da
SSDEEP

24576:FN0GwyBuP3nClQbhuaVab2FzUqh6v5BunN4EcS0nz+FbLdY:vFwyBuPSlqhuaVab2Fzd6fI4SFbLdY

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  fe0cbcda43f85e76aa034e0ce50138a8_JaffaCakes118
- Size
  
  1.3MB
- MD5
  
  fe0cbcda43f85e76aa034e0ce50138a8
- SHA1
  
  23b0d8bad9fa2d51c58922b2c90e8c63ad2a6186
- SHA256
  
  67e09012b104a8df2a0a3ca3ce7ccf04007400727e892bb200d3734d0e602bc9
- SHA512
  
  abbef58f1aae2421c1b3a0ee6ef7b730307358b332bb38f9eff932bef51b23ab16ff71f4f214a43f642cacaecad48d5d44624c752fb9a4cd5c971ff5887b67da
- SSDEEP
  
  24576:FN0GwyBuP3nClQbhuaVab2FzUqh6v5BunN4EcS0nz+FbLdY:vFwyBuPSlqhuaVab2Fzd6fI4SFbLdY
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer