9fc0e962b070b3960f19f8bb96c3aeba708a5fd0e7b3a218776071fe5848d385 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a3177e15f10c53be3991b6a2119a541_JaffaCakes118
Size

36KB
Sample

241002-mfe4ya1clm
MD5

0a3177e15f10c53be3991b6a2119a541
SHA1

485e9af25d26da8476b3f52746398472795cf7b2
SHA256

9fc0e962b070b3960f19f8bb96c3aeba708a5fd0e7b3a218776071fe5848d385
SHA512

94d86e2d1bd7d37d475e3d4dff182e18c4e7f296b73245fcb5f961ab021b90a7ddf65782015065013b8b370f81237c7b94747cbbd3794502e734f3b2b4a1bb2d
SSDEEP

768:FJ1VV0P3gQNBVkg0/h+64QtoWWcXtmkiizK:FJ1nmg+N8h+64QtoWXmkxm

Score

7^/10

discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  0a3177e15f10c53be3991b6a2119a541_JaffaCakes118
- Size
  
  36KB
- MD5
  
  0a3177e15f10c53be3991b6a2119a541
- SHA1
  
  485e9af25d26da8476b3f52746398472795cf7b2
- SHA256
  
  9fc0e962b070b3960f19f8bb96c3aeba708a5fd0e7b3a218776071fe5848d385
- SHA512
  
  94d86e2d1bd7d37d475e3d4dff182e18c4e7f296b73245fcb5f961ab021b90a7ddf65782015065013b8b370f81237c7b94747cbbd3794502e734f3b2b4a1bb2d
- SSDEEP
  
  768:FJ1VV0P3gQNBVkg0/h+64QtoWWcXtmkiizK:FJ1nmg+N8h+64QtoWXmkxm
Score

7^/10

discovery persistence spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealer

behavioral2

discoverypersistencespywarestealer