d1523cdc987b3ca9492c1683733e360ee62d216e5c62e0d3b8bda30b012d22da | Triage

Sharing

General

Target

061cc578d1a390082e614140b56d7bcc_JaffaCakes118
Size

1.1MB
Sample

241001-rbjnsaxbpd
MD5

061cc578d1a390082e614140b56d7bcc
SHA1

632a9b8c2762d692e993d70df7bc087c04e64a50
SHA256

d1523cdc987b3ca9492c1683733e360ee62d216e5c62e0d3b8bda30b012d22da
SHA512

d5b1058ac84dd3b82e590b2da8eda3f6aa6a6768f86fb2f2251d80b2da6ebf5746278eef4cba0d51197b013da1109bc4f174647d7f0de5dad4d738e80c3059ff
SSDEEP

24576:i4oKmf5R/pOCuxGU13IlBwaa6NKHb/JGkYI/8UZ:i4uv/pOCIGk3Ivwaa6IHz0kYM8U

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  061cc578d1a390082e614140b56d7bcc_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  061cc578d1a390082e614140b56d7bcc
- SHA1
  
  632a9b8c2762d692e993d70df7bc087c04e64a50
- SHA256
  
  d1523cdc987b3ca9492c1683733e360ee62d216e5c62e0d3b8bda30b012d22da
- SHA512
  
  d5b1058ac84dd3b82e590b2da8eda3f6aa6a6768f86fb2f2251d80b2da6ebf5746278eef4cba0d51197b013da1109bc4f174647d7f0de5dad4d738e80c3059ff
- SSDEEP
  
  24576:i4oKmf5R/pOCuxGU13IlBwaa6NKHb/JGkYI/8UZ:i4uv/pOCIGk3Ivwaa6IHz0kYM8U
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer