921c7a4ec72f857913362b7cd75300e57ae805dba29c8ac0e62806295dfa60ce | Triage

Sharing

General

Target

aKDzIJRX7hjOy0J.exe
Size

423KB
Sample

200710-78yt6m4lta
MD5

93acf64e4e9895ba3b94b976af3b41ac
SHA1

66e1c012ac8ce53e3cb25debc75eeadcfd26d45a
SHA256

921c7a4ec72f857913362b7cd75300e57ae805dba29c8ac0e62806295dfa60ce
SHA512

f08f75ddc28cec487489dee06a20f5945a7cc6ad67dd47780887684e1960ec94300219f7574d7acbd02cda35c522cee1d95182515cb4753592888ad058313632

Score

7^/10

spyware

Malware Config

Targets

- Target
  
  aKDzIJRX7hjOy0J.exe
- Size
  
  423KB
- MD5
  
  93acf64e4e9895ba3b94b976af3b41ac
- SHA1
  
  66e1c012ac8ce53e3cb25debc75eeadcfd26d45a
- SHA256
  
  921c7a4ec72f857913362b7cd75300e57ae805dba29c8ac0e62806295dfa60ce
- SHA512
  
  f08f75ddc28cec487489dee06a20f5945a7cc6ad67dd47780887684e1960ec94300219f7574d7acbd02cda35c522cee1d95182515cb4753592888ad058313632
Score

7^/10

spyware
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2