Overview

overview

10

Static

static

4cace4e5c6...f5.exe

windows7_x64

10

4cace4e5c6...f5.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4cace4e5c65b4897b67f3f7de53b4f21e4ecb0e66946e0881e5f735da3ea79f5

  • Size

    232KB

  • Sample

    220418-ljz3vaabcl

  • MD5

    8c90ed018ffb8f83b20b8de907937806

  • SHA1

    8ca84e166739dd67dd90110909ee7cd28b2f34ae

  • SHA256

    4cace4e5c65b4897b67f3f7de53b4f21e4ecb0e66946e0881e5f735da3ea79f5

  • SHA512

    395a6e79a8d02ec58d33af3fa93169e51532ffea4dbc200fb9a729126d9794547b96720f18ec8d8a3fc872de2b06bc8648d52ea28c11f4cd40b1b55b0cbb6d3e

Score
10/10
poullightspywarestealertrojan

Malware Config

Targets

    • Target

      4cace4e5c65b4897b67f3f7de53b4f21e4ecb0e66946e0881e5f735da3ea79f5

    • Size

      232KB

    • MD5

      8c90ed018ffb8f83b20b8de907937806

    • SHA1

      8ca84e166739dd67dd90110909ee7cd28b2f34ae

    • SHA256

      4cace4e5c65b4897b67f3f7de53b4f21e4ecb0e66946e0881e5f735da3ea79f5

    • SHA512

      395a6e79a8d02ec58d33af3fa93169e51532ffea4dbc200fb9a729126d9794547b96720f18ec8d8a3fc872de2b06bc8648d52ea28c11f4cd40b1b55b0cbb6d3e

    Score
    10/10
    poullightspywarestealertrojan

    • Poullight

      Poullight is an information stealer first seen in March 2020.

      trojanstealerpoullight

    • Poullight Stealer Payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks