cebb30c9d64538e4311c2bc22452f4eace3717485e9cf3a08b788ff46315aea4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38ed3af6f67ef5e2d18baf2413618c37_JaffaCakes118
Size

104KB
Sample

241012-hth1jatdkk
MD5

38ed3af6f67ef5e2d18baf2413618c37
SHA1

50248be1230ab8945e96f26bf6027418d84d1690
SHA256

cebb30c9d64538e4311c2bc22452f4eace3717485e9cf3a08b788ff46315aea4
SHA512

b4bf9618e2a62a3db2c47248bc32fd0437fd1b2519760885136f49c4a236d0b6ada37a2fad61dac2ea408a13fccc72ee594f8ea0b62104f7292b614476251093
SSDEEP

1536:6jIFtH8xnYF8DqHTJKqOPDMz88GXHXwbfVEkTepDwiHDS8RAYfk7Wu5y01Qz0:XFQTDGTJK5PfqdEkqpD9DS8mY87b9S

Score

7^/10

credential_access discovery spyware stealer

Malware Config

Targets

- Target
  
  38ed3af6f67ef5e2d18baf2413618c37_JaffaCakes118
- Size
  
  104KB
- MD5
  
  38ed3af6f67ef5e2d18baf2413618c37
- SHA1
  
  50248be1230ab8945e96f26bf6027418d84d1690
- SHA256
  
  cebb30c9d64538e4311c2bc22452f4eace3717485e9cf3a08b788ff46315aea4
- SHA512
  
  b4bf9618e2a62a3db2c47248bc32fd0437fd1b2519760885136f49c4a236d0b6ada37a2fad61dac2ea408a13fccc72ee594f8ea0b62104f7292b614476251093
- SSDEEP
  
  1536:6jIFtH8xnYF8DqHTJKqOPDMz88GXHXwbfVEkTepDwiHDS8RAYfk7Wu5y01Qz0:XFQTDGTJK5PfqdEkqpD9DS8mY87b9S
Score

7^/10

credential_access discovery spyware stealer
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Reads local data of messenger clients
  Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
  spyware stealer
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

credential_accessdiscoveryspywarestealer

behavioral2

credential_accessdiscoveryspywarestealer