1f7e0a861b1706f4503ad22b96e4d19526081f3e5e6fb73cc81bfced9c2a4556 | Triage

Sharing

General

Target

qyKhB5f1ZqVwJKa5.exe
Size

298KB
Sample

210915-h49w1adbcj
MD5

29d631f3a6348fd7e4c303b3ce041e2f
SHA1

96851ded0e1a3a54c4de715642f9b7460effbb02
SHA256

1f7e0a861b1706f4503ad22b96e4d19526081f3e5e6fb73cc81bfced9c2a4556
SHA512

5938f9eca3f815e8fe0fdfeffb50c79b7195af22014a8bd579a4f5a34908a870ddc74c48d6cce7a2f0a0cdce762e839300a13482b3029305a545f924d18c87be

Score

7^/10

ransomware spyware stealer

Malware Config

Targets

- Target
  
  qyKhB5f1ZqVwJKa5.exe
- Size
  
  298KB
- MD5
  
  29d631f3a6348fd7e4c303b3ce041e2f
- SHA1
  
  96851ded0e1a3a54c4de715642f9b7460effbb02
- SHA256
  
  1f7e0a861b1706f4503ad22b96e4d19526081f3e5e6fb73cc81bfced9c2a4556
- SHA512
  
  5938f9eca3f815e8fe0fdfeffb50c79b7195af22014a8bd579a4f5a34908a870ddc74c48d6cce7a2f0a0cdce762e839300a13482b3029305a545f924d18c87be
Score

7^/10

ransomware spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Defacement

Tasks

static1

behavioral1

ransomwarespywarestealer

behavioral2

ransomwarespywarestealer