94cb5e84212a6353fd3386f2d83f5b864c64f4bd3207eff718a843d172011a1f | Triage

Sharing

General

Target

0624c43699e11e05e7f784bebcf17768_JaffaCakes118
Size

1.6MB
Sample

241001-rf848sxdrh
MD5

0624c43699e11e05e7f784bebcf17768
SHA1

9058c4eaad185dd7b22a67198f51baa6b4f13cb0
SHA256

94cb5e84212a6353fd3386f2d83f5b864c64f4bd3207eff718a843d172011a1f
SHA512

4a40fa2bba990473d32abadcf88ed62f15790668d9b556e3a13994fd60a0194c762ea68c276a35f6923d72cd23e587fb0caddf62611b950edf09db2a1a57dce1
SSDEEP

49152:WQagM/VkLHwbwexxcTcoOfhc8AxOVnbw+ij/TtCUjnbIM:ZEVkLAxPo0c8hB9ijnjbJ

Score

7^/10

discovery evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  0624c43699e11e05e7f784bebcf17768_JaffaCakes118
- Size
  
  1.6MB
- MD5
  
  0624c43699e11e05e7f784bebcf17768
- SHA1
  
  9058c4eaad185dd7b22a67198f51baa6b4f13cb0
- SHA256
  
  94cb5e84212a6353fd3386f2d83f5b864c64f4bd3207eff718a843d172011a1f
- SHA512
  
  4a40fa2bba990473d32abadcf88ed62f15790668d9b556e3a13994fd60a0194c762ea68c276a35f6923d72cd23e587fb0caddf62611b950edf09db2a1a57dce1
- SSDEEP
  
  49152:WQagM/VkLHwbwexxcTcoOfhc8AxOVnbw+ij/TtCUjnbIM:ZEVkLAxPo0c8hB9ijnjbJ
Score

7^/10

discovery evasion spyware stealer trojan
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionspywarestealertrojan

behavioral2

discoveryspywarestealer