1cf4f3980e1cb9856ede236b89d3fa55aeee925a59fe71a624a6050185295ab5 | Triage

Sharing

General

Target

0b1a0460a6d52bd6c145c2ad8a1aaa7d_JaffaCakes118
Size

1.3MB
Sample

241002-rqey5svbld
MD5

0b1a0460a6d52bd6c145c2ad8a1aaa7d
SHA1

885f9dc8c83f662621bff6e75ab0e90975516ae8
SHA256

1cf4f3980e1cb9856ede236b89d3fa55aeee925a59fe71a624a6050185295ab5
SHA512

caa45f7374b75b34d6a78603cbd8e634bbf47115901e0e18b9b1f7cce94e55f6486e85a35b7de2e61f280925bbcf71beeb4d934f38f0eb72865ad9a56e1eaf1c
SSDEEP

24576:zgFvyVFyuvGRWI0Gnl3UVP3zY8HEwpzxz0DLacT06K:zQqVFyKa3eP3zVHEwpdz0DucT5K

Score

7^/10

discovery evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  0b1a0460a6d52bd6c145c2ad8a1aaa7d_JaffaCakes118
- Size
  
  1.3MB
- MD5
  
  0b1a0460a6d52bd6c145c2ad8a1aaa7d
- SHA1
  
  885f9dc8c83f662621bff6e75ab0e90975516ae8
- SHA256
  
  1cf4f3980e1cb9856ede236b89d3fa55aeee925a59fe71a624a6050185295ab5
- SHA512
  
  caa45f7374b75b34d6a78603cbd8e634bbf47115901e0e18b9b1f7cce94e55f6486e85a35b7de2e61f280925bbcf71beeb4d934f38f0eb72865ad9a56e1eaf1c
- SSDEEP
  
  24576:zgFvyVFyuvGRWI0Gnl3UVP3zY8HEwpzxz0DLacT06K:zQqVFyKa3eP3zVHEwpdz0DucT5K
Score

7^/10

discovery evasion spyware stealer trojan
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionspywarestealertrojan

behavioral2

discoveryevasionspywarestealertrojan