9c6f0808b153d33a76a1a7f55f12a3077af3791f8461c2015f3ba55db8f4147a | Triage

Sharing

General

Target

45e80cf65cdf2adce7dde174e0e736a7_JaffaCakes118
Size

1.1MB
Sample

241015-fdl15szckl
MD5

45e80cf65cdf2adce7dde174e0e736a7
SHA1

468d3e477c2280e9dd4616f1d7f2dbd51e8623f7
SHA256

9c6f0808b153d33a76a1a7f55f12a3077af3791f8461c2015f3ba55db8f4147a
SHA512

40f0309c01b99690388948d0a016f9e39d375c6272391b7edbc2a7c30277f7bebd5af37eb7cb1d81bc2d95f802dabcd0b69ce1be6c1d143d20fac672df2e6f04
SSDEEP

24576:mgwf5uVfrM8z8s5KbmlhMfpkYHw9NTMtyqlz+Rw/9:mgG5uVAM88Kbmlhahw9NTeyqmw

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  45e80cf65cdf2adce7dde174e0e736a7_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  45e80cf65cdf2adce7dde174e0e736a7
- SHA1
  
  468d3e477c2280e9dd4616f1d7f2dbd51e8623f7
- SHA256
  
  9c6f0808b153d33a76a1a7f55f12a3077af3791f8461c2015f3ba55db8f4147a
- SHA512
  
  40f0309c01b99690388948d0a016f9e39d375c6272391b7edbc2a7c30277f7bebd5af37eb7cb1d81bc2d95f802dabcd0b69ce1be6c1d143d20fac672df2e6f04
- SSDEEP
  
  24576:mgwf5uVfrM8z8s5KbmlhMfpkYHw9NTMtyqlz+Rw/9:mgG5uVAM88Kbmlhahw9NTeyqmw
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer