Extracted

• • Target
    jaffacakes118_371ab4603be0f2fdbc651aa85f68b34145caec9db727ec38e5736fe0de8778fc.bin
  • Size 1.2MB
  • SHA256 371ab4603be0f2fdbc651aa85f68b34145caec9db727ec38e5736fe0de8778fc
  • MD5 085f88ff5068ab49365aa48d1210475b
  • SHA1 85e119b190a061a4298869b35b4d2b6b06400e3b
  • SHA512 0ceaf96e44ccfb28412c5f49ba557796cf07ab81cf13fdf2bc3a610c470376f4adb455d3363e979e2eba436828cc996934f6a619f039b3e1b3ae123d2fd7d684
  • SSDEEP 24576:qrR0NaOy0mK9yCksn6JCc2YkxfUyamitsDw+mLRbbOnW:qkHmiyCkhh2Bamituw+UV5
  • TLSH
    T1D3557C0BA26141BCD4BBE1789A175A47F775704603709AEB07E446A63F13FE1AEBE310
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  collectioncredential_accessdiscoveryexecutionpersistenceprivilege_escalationspywarestealer

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2