5de7c3253533bc64c9c5f57ab2397f37ac55a5ec06dc58fefb9c9dc21962c8ca | Triage

Sharing

General

Target

52d860dba4f7ae96ad1b32633ed1669b_JaffaCakes118
Size

1.1MB
Sample

241017-vz8jlawglc
MD5

52d860dba4f7ae96ad1b32633ed1669b
SHA1

25b4f8adc3974193eaa77934502d7c9a12e9ca5c
SHA256

5de7c3253533bc64c9c5f57ab2397f37ac55a5ec06dc58fefb9c9dc21962c8ca
SHA512

47803b75295413f587a5bb1a2348513ab0998fc155498905963112925ea19db384217ff0dc03a02843abc1711567018619265ab9d93d2d57515803c1ab05f4cd
SSDEEP

24576:ov3Pe6k1Bd/2XtmLdK50a6VccpbzVh9uATcVB9lq8fTOuo:ovFkNMt4dzwcJhoATcDDn9

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  52d860dba4f7ae96ad1b32633ed1669b_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  52d860dba4f7ae96ad1b32633ed1669b
- SHA1
  
  25b4f8adc3974193eaa77934502d7c9a12e9ca5c
- SHA256
  
  5de7c3253533bc64c9c5f57ab2397f37ac55a5ec06dc58fefb9c9dc21962c8ca
- SHA512
  
  47803b75295413f587a5bb1a2348513ab0998fc155498905963112925ea19db384217ff0dc03a02843abc1711567018619265ab9d93d2d57515803c1ab05f4cd
- SSDEEP
  
  24576:ov3Pe6k1Bd/2XtmLdK50a6VccpbzVh9uATcVB9lq8fTOuo:ovFkNMt4dzwcJhoATcDDn9
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer