05e0b010a26d5f9bc4f4e205bbafd8bc9a7fcc058e9d3fc092a4ff57ae31091e | Triage

Sharing

General

Target

05e0b010a26d5f9bc4f4e205bbafd8bc9a7fcc058e9d3fc092a4ff57ae31091e
Size

415KB
Sample

220521-j6versbbh9
MD5

d35a1fa1e41497b5abb9f5b63be3ecda
SHA1

6b51568929895f97541a5ffeda22a389dc784f21
SHA256

05e0b010a26d5f9bc4f4e205bbafd8bc9a7fcc058e9d3fc092a4ff57ae31091e
SHA512

0222b1ac9fc0cbf55a37397d8eb30a8bcce80740dfdd8f1b2b0e364ac7dc77c62183578e605019bdbd6530e6d0c1678f85f255f498c1d09703e4b41240ed7ecd

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  05e0b010a26d5f9bc4f4e205bbafd8bc9a7fcc058e9d3fc092a4ff57ae31091e
- Size
  
  415KB
- MD5
  
  d35a1fa1e41497b5abb9f5b63be3ecda
- SHA1
  
  6b51568929895f97541a5ffeda22a389dc784f21
- SHA256
  
  05e0b010a26d5f9bc4f4e205bbafd8bc9a7fcc058e9d3fc092a4ff57ae31091e
- SHA512
  
  0222b1ac9fc0cbf55a37397d8eb30a8bcce80740dfdd8f1b2b0e364ac7dc77c62183578e605019bdbd6530e6d0c1678f85f255f498c1d09703e4b41240ed7ecd
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer