c272b5ffd475c5fcc88fb1fc31056c17087bbe75d475537a89422fe7cd8bd01d | Triage

Sharing

General

Target

14172cf8d96a7818b4f6d5f1f25d4e16_JaffaCakes118
Size

1.1MB
Sample

241004-tw3y9sycpc
MD5

14172cf8d96a7818b4f6d5f1f25d4e16
SHA1

7927a12944e97130d9af8800da1a8a9e5aa248bc
SHA256

c272b5ffd475c5fcc88fb1fc31056c17087bbe75d475537a89422fe7cd8bd01d
SHA512

e124986ad132a595c87884fcfa38e2949937c98a7d9f96e04fb4ad545ea1a352ebe60d0bc432cc5812c59b9b21df2d7e28c9e38e83634166f371b9e0f7b73940
SSDEEP

24576:RUp9ToJ9BTh+rrDP4KkhnjCkCDFRTSEXoTj7g1o:WpKT+HDgKkhjXWfT5XQ7

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  14172cf8d96a7818b4f6d5f1f25d4e16_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  14172cf8d96a7818b4f6d5f1f25d4e16
- SHA1
  
  7927a12944e97130d9af8800da1a8a9e5aa248bc
- SHA256
  
  c272b5ffd475c5fcc88fb1fc31056c17087bbe75d475537a89422fe7cd8bd01d
- SHA512
  
  e124986ad132a595c87884fcfa38e2949937c98a7d9f96e04fb4ad545ea1a352ebe60d0bc432cc5812c59b9b21df2d7e28c9e38e83634166f371b9e0f7b73940
- SSDEEP
  
  24576:RUp9ToJ9BTh+rrDP4KkhnjCkCDFRTSEXoTj7g1o:WpKT+HDgKkhjXWfT5XQ7
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer