4f8406b6537da0531838feba6fc870a4b5de85cb133017b9e8ad26be98bab01f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c1c86b5e02b7a22da3c64f9186380bd_JaffaCakes118
Size

1.8MB
Sample

241009-gqj8rawdlr
MD5

2c1c86b5e02b7a22da3c64f9186380bd
SHA1

244942aa2050debb87efda827ba72f4d30dd3096
SHA256

4f8406b6537da0531838feba6fc870a4b5de85cb133017b9e8ad26be98bab01f
SHA512

b82b48ae629506ad6473b5ad197340cb6465ca3f04cfe603686b7fa2a3f815b2bba8ea24d25ad40543fa57f06ff9a98a42f4043783d4c2c5d901534cce62a2d1
SSDEEP

24576:Wco0DI7+5N9rL46OuC4lNeQjfA86eVY9SxyU1reYJvBpR2qw4FoTnGvql/NWmrYA:WcngkS26eVY9SxYYjpER4FoTll/sSKI

Score

7^/10

discovery evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  2c1c86b5e02b7a22da3c64f9186380bd_JaffaCakes118
- Size
  
  1.8MB
- MD5
  
  2c1c86b5e02b7a22da3c64f9186380bd
- SHA1
  
  244942aa2050debb87efda827ba72f4d30dd3096
- SHA256
  
  4f8406b6537da0531838feba6fc870a4b5de85cb133017b9e8ad26be98bab01f
- SHA512
  
  b82b48ae629506ad6473b5ad197340cb6465ca3f04cfe603686b7fa2a3f815b2bba8ea24d25ad40543fa57f06ff9a98a42f4043783d4c2c5d901534cce62a2d1
- SSDEEP
  
  24576:Wco0DI7+5N9rL46OuC4lNeQjfA86eVY9SxyU1reYJvBpR2qw4FoTnGvql/NWmrYA:WcngkS26eVY9SxYYjpER4FoTll/sSKI
Score

7^/10

discovery evasion spyware stealer trojan
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionspywarestealertrojan

behavioral2

discoveryevasionspywarestealertrojan