ea7b9087f97988d41b157c71b5920087649fbacd8e823a93afbd8f7e013267dd | Triage

Sharing

General

Target

139b9dd93488ae1f4306e50d4b340909_JaffaCakes118
Size

1006KB
Sample

241004-q5nn6axdpq
MD5

139b9dd93488ae1f4306e50d4b340909
SHA1

a2600756b5e9378312d564df555783122c04d9f5
SHA256

ea7b9087f97988d41b157c71b5920087649fbacd8e823a93afbd8f7e013267dd
SHA512

c819dec8def92c82806da96ca7bb30f80193aeffc262bff3f185f8f4d1f94f5f30de73cf6fcc171a20728011914083090281582c9c6446f3159ba0fd802f63c9
SSDEEP

24576:+f/RMpsocGdc9tzeFK9iQVg6aHjIlW83d0ERwbP2a4FU9c:IJM7/mnVDa8toua4+

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  139b9dd93488ae1f4306e50d4b340909_JaffaCakes118
- Size
  
  1006KB
- MD5
  
  139b9dd93488ae1f4306e50d4b340909
- SHA1
  
  a2600756b5e9378312d564df555783122c04d9f5
- SHA256
  
  ea7b9087f97988d41b157c71b5920087649fbacd8e823a93afbd8f7e013267dd
- SHA512
  
  c819dec8def92c82806da96ca7bb30f80193aeffc262bff3f185f8f4d1f94f5f30de73cf6fcc171a20728011914083090281582c9c6446f3159ba0fd802f63c9
- SSDEEP
  
  24576:+f/RMpsocGdc9tzeFK9iQVg6aHjIlW83d0ERwbP2a4FU9c:IJM7/mnVDa8toua4+
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer