fcac94f7dc3fa124c4a8c53173f8e2c33ce39ff8d6069480709dfde8bed3b25c | Triage

Sharing

General

Target

44e6abb55dcdaab7960e35a3b9ba6dff_JaffaCakes118
Size

1.0MB
Sample

241015-ankm6stfjc
MD5

44e6abb55dcdaab7960e35a3b9ba6dff
SHA1

1f8725ce2d4bb92cac89e5bf1394c05b70eedbfc
SHA256

fcac94f7dc3fa124c4a8c53173f8e2c33ce39ff8d6069480709dfde8bed3b25c
SHA512

6efc37aba154f72e80ae6054933a08ce2d100f5ee15b9de3770df324e0cc6b973f147c42f95dfed183f1b361e096f2727784f476c34dd267a1f422a4eb3c773b
SSDEEP

24576:7cb+idvA0335VposjpUjZfxB+pbpTuSjSoFo8KTsHmAF5e:QRdX3pVpHjpUV58p9TuSjSoFo8KTUmAF

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  44e6abb55dcdaab7960e35a3b9ba6dff_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  44e6abb55dcdaab7960e35a3b9ba6dff
- SHA1
  
  1f8725ce2d4bb92cac89e5bf1394c05b70eedbfc
- SHA256
  
  fcac94f7dc3fa124c4a8c53173f8e2c33ce39ff8d6069480709dfde8bed3b25c
- SHA512
  
  6efc37aba154f72e80ae6054933a08ce2d100f5ee15b9de3770df324e0cc6b973f147c42f95dfed183f1b361e096f2727784f476c34dd267a1f422a4eb3c773b
- SSDEEP
  
  24576:7cb+idvA0335VposjpUjZfxB+pbpTuSjSoFo8KTsHmAF5e:QRdX3pVpHjpUV58p9TuSjSoFo8KTUmAF
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer