5e98d066cbe672776fcb8301b6421fe524134389e8e507f739472fbb77f6fac9 | Triage

Sharing

General

Target

9f050d05bbc30204d9983fa4a0c3cbed_JaffaCakes118
Size

1.8MB
Sample

241126-bqfmnstjgl
MD5

9f050d05bbc30204d9983fa4a0c3cbed
SHA1

dad7a606a4be604d0f40469dcb830f72f09987e2
SHA256

5e98d066cbe672776fcb8301b6421fe524134389e8e507f739472fbb77f6fac9
SHA512

97057ef4a659e3a1852c71f29ece123abe0a9757a164e14dab753ab2d4a1465189ead792e626b9f50b2cfe06a2dc7d7e165e743d6dceb72640e3528637043785
SSDEEP

24576:6zWJ69qM6xE3IFu8jUIlYWM5ptIT8hdiUrT8mEdzvw1coPF/BJhFvvtg+N/9ppAP:6iHycM1+7dzvw1coPFTvS+pHpA6TrpKN

Score

7^/10

discovery evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  9f050d05bbc30204d9983fa4a0c3cbed_JaffaCakes118
- Size
  
  1.8MB
- MD5
  
  9f050d05bbc30204d9983fa4a0c3cbed
- SHA1
  
  dad7a606a4be604d0f40469dcb830f72f09987e2
- SHA256
  
  5e98d066cbe672776fcb8301b6421fe524134389e8e507f739472fbb77f6fac9
- SHA512
  
  97057ef4a659e3a1852c71f29ece123abe0a9757a164e14dab753ab2d4a1465189ead792e626b9f50b2cfe06a2dc7d7e165e743d6dceb72640e3528637043785
- SSDEEP
  
  24576:6zWJ69qM6xE3IFu8jUIlYWM5ptIT8hdiUrT8mEdzvw1coPF/BJhFvvtg+N/9ppAP:6iHycM1+7dzvw1coPFTvS+pHpA6TrpKN
Score

7^/10

discovery evasion spyware stealer trojan
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionspywarestealertrojan

behavioral2

discoveryevasionspywarestealertrojan