e6b3dfdd1137aa076236591856c8c316f26f42bb49676c1c7144935631f95f27 | Triage

Sharing

General

Target

0543f8a9da31d410f93046a620ea339b_JaffaCakes118
Size

55KB
Sample

241001-lheerawerd
MD5

0543f8a9da31d410f93046a620ea339b
SHA1

f210a58d86bfbfec3836c7bc9a5e46e6caac5028
SHA256

e6b3dfdd1137aa076236591856c8c316f26f42bb49676c1c7144935631f95f27
SHA512

55e9969da1eee4b5ff0db55bd08abff9ea1a12b2b511639fe77cc897faf8670c2f8abe6f1c5392dc1b6b95bed80babe095b8607f7bf1d58bae22707a701c68e5
SSDEEP

768:g1XQuE0yZbxGn4I7ax/koLsj5XAau3/Ltwdh:egFZbvI7sGO3/Wd

Score

7^/10

credential_access discovery spyware stealer

Malware Config

Targets

- Target
  
  0543f8a9da31d410f93046a620ea339b_JaffaCakes118
- Size
  
  55KB
- MD5
  
  0543f8a9da31d410f93046a620ea339b
- SHA1
  
  f210a58d86bfbfec3836c7bc9a5e46e6caac5028
- SHA256
  
  e6b3dfdd1137aa076236591856c8c316f26f42bb49676c1c7144935631f95f27
- SHA512
  
  55e9969da1eee4b5ff0db55bd08abff9ea1a12b2b511639fe77cc897faf8670c2f8abe6f1c5392dc1b6b95bed80babe095b8607f7bf1d58bae22707a701c68e5
- SSDEEP
  
  768:g1XQuE0yZbxGn4I7ax/koLsj5XAau3/Ltwdh:egFZbvI7sGO3/Wd
Score

7^/10

credential_access discovery spyware stealer
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Reads local data of messenger clients
  Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
  spyware stealer
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

credential_accessdiscoveryspywarestealer

behavioral2