8216e4c1977597afe01bb3c0a47631bd7608963a38ca6c396790fbf37d0fcffb | Triage

Sharing

General

Target

8216e4c1977597afe01bb3c0a47631bd7608963a38ca6c396790fbf37d0fcffb_pidor.xyz_dedob2.exe
Size

154KB
Sample

220413-l9mkfaecd4
MD5

b8a87406f57b8d0104b3a241fecb13df
SHA1

45a9e46bb7243531b708adce1f9789db41ceb09d
SHA256

8216e4c1977597afe01bb3c0a47631bd7608963a38ca6c396790fbf37d0fcffb
SHA512

9701ec02514222be60fa6dc2a174b17788bf218d2a1a352cf92223124fa5856dbf1949950f7066e8382dbe853f7ddab95927e21049637219445d8997964088ab

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  8216e4c1977597afe01bb3c0a47631bd7608963a38ca6c396790fbf37d0fcffb_pidor.xyz_dedob2.exe
- Size
  
  154KB
- MD5
  
  b8a87406f57b8d0104b3a241fecb13df
- SHA1
  
  45a9e46bb7243531b708adce1f9789db41ceb09d
- SHA256
  
  8216e4c1977597afe01bb3c0a47631bd7608963a38ca6c396790fbf37d0fcffb
- SHA512
  
  9701ec02514222be60fa6dc2a174b17788bf218d2a1a352cf92223124fa5856dbf1949950f7066e8382dbe853f7ddab95927e21049637219445d8997964088ab
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer