021a74ba201b75736c61a2b8fd13b21b93674c58c1131722d76561e3b151d06b | Triage

Sharing

General

Target

021a74ba201b75736c61a2b8fd13b21b93674c58c1131722d76561e3b151d06b.bin
Size

171KB
Sample

220922-pk5aqsfcaj
MD5

92f639c6408c28747d17e8993fe8a8c7
SHA1

59b113ccd3f69fd1fe2c042b46144bd75f87b8fd
SHA256

021a74ba201b75736c61a2b8fd13b21b93674c58c1131722d76561e3b151d06b
SHA512

afa9a98d1bb5a886fc61ba3b7f80d6df0b05fd7613acf8e03e4fa1f48fd3f2e9b0c376259dcfcc8cece34a3545052bdeabfd31e53ca149608c627804e6bdcffd
SSDEEP

3072:r4cDUHKmrcw+RtDbh1mcR/pep6ECGfyCRULV6NsXqILSLCFsFZNaaJr:U1Hsw+Ph1mEG6ECGfyCRULV6NsXqILS9

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  021a74ba201b75736c61a2b8fd13b21b93674c58c1131722d76561e3b151d06b.bin
- Size
  
  171KB
- MD5
  
  92f639c6408c28747d17e8993fe8a8c7
- SHA1
  
  59b113ccd3f69fd1fe2c042b46144bd75f87b8fd
- SHA256
  
  021a74ba201b75736c61a2b8fd13b21b93674c58c1131722d76561e3b151d06b
- SHA512
  
  afa9a98d1bb5a886fc61ba3b7f80d6df0b05fd7613acf8e03e4fa1f48fd3f2e9b0c376259dcfcc8cece34a3545052bdeabfd31e53ca149608c627804e6bdcffd
- SSDEEP
  
  3072:r4cDUHKmrcw+RtDbh1mcR/pep6ECGfyCRULV6NsXqILSLCFsFZNaaJr:U1Hsw+Ph1mEG6ECGfyCRULV6NsXqILS9
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2