5c1052fb39abba3f34e2f7f033267059dfa32b0929e09048f437c985af07f294 | Triage

Sharing

General

Target

5c1052fb39abba3f34e2f7f033267059dfa32b0929e09048f437c985af07f294
Size

1.3MB
Sample

211021-l6jdlsabd6
MD5

6db8f1414b9320c2e92a0e937da1f4e1
SHA1

c79ed5cbe0e4872dc373ba3edff0c37e5fc45ce3
SHA256

5c1052fb39abba3f34e2f7f033267059dfa32b0929e09048f437c985af07f294
SHA512

f7f3d8d9d6a6f6c9d40a57115730b4cda34cc2ea2b47c2a1dc7eaa1a3ab6fd661d5482a3cc104d8d8859d3cb73abb5a2c0437f900e17cc8073de3d5f9be13332

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  5c1052fb39abba3f34e2f7f033267059dfa32b0929e09048f437c985af07f294
- Size
  
  1.3MB
- MD5
  
  6db8f1414b9320c2e92a0e937da1f4e1
- SHA1
  
  c79ed5cbe0e4872dc373ba3edff0c37e5fc45ce3
- SHA256
  
  5c1052fb39abba3f34e2f7f033267059dfa32b0929e09048f437c985af07f294
- SHA512
  
  f7f3d8d9d6a6f6c9d40a57115730b4cda34cc2ea2b47c2a1dc7eaa1a3ab6fd661d5482a3cc104d8d8859d3cb73abb5a2c0437f900e17cc8073de3d5f9be13332
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1