xorist | 5403af9977fd94503913667d164e3a751e91e1d07fa67db01dc661219c708eaa | Triage

Sharing

General

Target

5c493f9fb1c601a4aa76b695d4e00123_JaffaCakes118
Size

11KB
Sample

241019-m1s7asvank
MD5

5c493f9fb1c601a4aa76b695d4e00123
SHA1

62ef64de682fcb1f015c1e402888f7f070120732
SHA256

5403af9977fd94503913667d164e3a751e91e1d07fa67db01dc661219c708eaa
SHA512

9fd1a33e3cc7bb7f042840f5167746f260ca0b221f03af540b535b023b0eac01beda886cc336e0d013b62bf213a221567446c7d2390f46a5699e00df2e7d1ea7
SSDEEP

192:9/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRMW3YN51:9ebFNw4Pk1itKkpAjjJs6B40WW3YNT

Score

10^/10

xorist discovery spyware stealer

Malware Config

Targets

- Target
  
  5c493f9fb1c601a4aa76b695d4e00123_JaffaCakes118
- Size
  
  11KB
- MD5
  
  5c493f9fb1c601a4aa76b695d4e00123
- SHA1
  
  62ef64de682fcb1f015c1e402888f7f070120732
- SHA256
  
  5403af9977fd94503913667d164e3a751e91e1d07fa67db01dc661219c708eaa
- SHA512
  
  9fd1a33e3cc7bb7f042840f5167746f260ca0b221f03af540b535b023b0eac01beda886cc336e0d013b62bf213a221567446c7d2390f46a5699e00df2e7d1ea7
- SSDEEP
  
  192:9/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRMW3YN51:9ebFNw4Pk1itKkpAjjJs6B40WW3YNT
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer