56508c940ad0d574ce02a6debee347442994e7fa77938880c45004746372ac79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1273d2aaa297a2f95dd328b325e47c09_JaffaCakes118
Size

1.1MB
Sample

241004-jmm7cascql
MD5

1273d2aaa297a2f95dd328b325e47c09
SHA1

4cd7443e62ca37476ee9dc1fc88dba7f0bb593e6
SHA256

56508c940ad0d574ce02a6debee347442994e7fa77938880c45004746372ac79
SHA512

e140172415e80c79212bc1b4a78ada3e04b3a94666f5794d95868845fa0d41262b3c483d8b3ca75cef66efc11aebccb7c1dfa0567b92923a0c57ffdce1abd7fb
SSDEEP

24576:i4oKmf5R/pOCuxGU13IlBwaa6NKHb/JGkYI/8UZ:i4uv/pOCIGk3Ivwaa6IHz0kYM8U

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  1273d2aaa297a2f95dd328b325e47c09_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  1273d2aaa297a2f95dd328b325e47c09
- SHA1
  
  4cd7443e62ca37476ee9dc1fc88dba7f0bb593e6
- SHA256
  
  56508c940ad0d574ce02a6debee347442994e7fa77938880c45004746372ac79
- SHA512
  
  e140172415e80c79212bc1b4a78ada3e04b3a94666f5794d95868845fa0d41262b3c483d8b3ca75cef66efc11aebccb7c1dfa0567b92923a0c57ffdce1abd7fb
- SSDEEP
  
  24576:i4oKmf5R/pOCuxGU13IlBwaa6NKHb/JGkYI/8UZ:i4uv/pOCIGk3Ivwaa6IHz0kYM8U
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer