b62def0152f55f23197e99f8c2031afa2b837b6a435a6126c297ceaa15ad2ffa | Triage

Sharing

General

Target

849d4743211f2003a7fcc677332c6e72_JaffaCakes118
Size

1.0MB
Sample

241101-1bd8qswame
MD5

849d4743211f2003a7fcc677332c6e72
SHA1

c35f0fc06ad572c716bb3c794a75981d02d29326
SHA256

b62def0152f55f23197e99f8c2031afa2b837b6a435a6126c297ceaa15ad2ffa
SHA512

728f465f5cceeede66b65b300de2a916fe12166e60a60ab92732c0772722c244bbd8236b4dd468855d54cdf1cdb6acdac6cdb4d98c24394e7b1bf0aa84ab26d4
SSDEEP

24576:zTUPY+Dc12PTE88xtJD62YHZfAET/4XQg8h2:XUPY2pO+2Y9dTwXF

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  849d4743211f2003a7fcc677332c6e72_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  849d4743211f2003a7fcc677332c6e72
- SHA1
  
  c35f0fc06ad572c716bb3c794a75981d02d29326
- SHA256
  
  b62def0152f55f23197e99f8c2031afa2b837b6a435a6126c297ceaa15ad2ffa
- SHA512
  
  728f465f5cceeede66b65b300de2a916fe12166e60a60ab92732c0772722c244bbd8236b4dd468855d54cdf1cdb6acdac6cdb4d98c24394e7b1bf0aa84ab26d4
- SSDEEP
  
  24576:zTUPY+Dc12PTE88xtJD62YHZfAET/4XQg8h2:XUPY2pO+2Y9dTwXF
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer