71f9a60b7529c076cbc0dcb9dbc1f80799a1ed2bd0d556b907f6cd1962dcfa22 | Triage

Sharing

General

Target

JaffaCakes118_278475e241c2c4eedb90ab925b3739af
Size

1.2MB
Sample

250125-c9m2ja1rby
MD5

278475e241c2c4eedb90ab925b3739af
SHA1

e3470eadb53a76bda60b5c3b3a5952c0c87aa051
SHA256

71f9a60b7529c076cbc0dcb9dbc1f80799a1ed2bd0d556b907f6cd1962dcfa22
SHA512

23044e5953875f42dceb1b84097ea4041a4cc649751acbbf566c16fc531167f38b53d2d29a7e88d676ba1ad8f0746936de05f049c37b069033a7afd6054d690c
SSDEEP

24576:RK98fdhYcCN2boApazAdwWA1AriUByz6UnDPAs:o98fdhYcw2LEAdCkLSnT

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  JaffaCakes118_278475e241c2c4eedb90ab925b3739af
- Size
  
  1.2MB
- MD5
  
  278475e241c2c4eedb90ab925b3739af
- SHA1
  
  e3470eadb53a76bda60b5c3b3a5952c0c87aa051
- SHA256
  
  71f9a60b7529c076cbc0dcb9dbc1f80799a1ed2bd0d556b907f6cd1962dcfa22
- SHA512
  
  23044e5953875f42dceb1b84097ea4041a4cc649751acbbf566c16fc531167f38b53d2d29a7e88d676ba1ad8f0746936de05f049c37b069033a7afd6054d690c
- SSDEEP
  
  24576:RK98fdhYcCN2boApazAdwWA1AriUByz6UnDPAs:o98fdhYcw2LEAdCkLSnT
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer