077225467638a420cf29fb9b3f0241416dcb9ed5d4ba32fdcf2bf28f095740bb | Triage

Resubmissions

17-09-2022 17:15

220917-vshplaeafr 10

17-06-2022 18:07

220617-wqnnhafde2 7

30-04-2022 21:22

220430-z7v1paagb2 7

Sharing

General

Target

077225467638a420cf29fb9b3f0241416dcb9ed5d4ba32fdcf2bf28f095740bb.exe
Size

1.7MB
Sample

220617-wqnnhafde2
MD5

6415da5eeb7102dfb6147bcd3aa79eb3
SHA1

d231903de12e11e94f3b52c5b71fe8a6ecf30458
SHA256

077225467638a420cf29fb9b3f0241416dcb9ed5d4ba32fdcf2bf28f095740bb
SHA512

9a343ef8cf2e7d89cfd735a5be278c8b1d4dafa341aa14db85e4637d1be5a991555c51d63142c5ecc67f091f843b49843cf4eebe3c372c2323ee0caf4d8223a5

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  077225467638a420cf29fb9b3f0241416dcb9ed5d4ba32fdcf2bf28f095740bb.exe
- Size
  
  1.7MB
- MD5
  
  6415da5eeb7102dfb6147bcd3aa79eb3
- SHA1
  
  d231903de12e11e94f3b52c5b71fe8a6ecf30458
- SHA256
  
  077225467638a420cf29fb9b3f0241416dcb9ed5d4ba32fdcf2bf28f095740bb
- SHA512
  
  9a343ef8cf2e7d89cfd735a5be278c8b1d4dafa341aa14db85e4637d1be5a991555c51d63142c5ecc67f091f843b49843cf4eebe3c372c2323ee0caf4d8223a5
Score

7^/10

spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2