4064c1351b8230044acd3b03b5a4bc856c6cfb05676a42f041d8094297ea33ad | Triage

Sharing

General

Target

4064c1351b8230044acd3b03b5a4bc856c6cfb05676a42f041d8094297ea33ad
Size

1.1MB
Sample

220923-dawp3achc2
MD5

07529dbc5603cacb426137b0fa110e46
SHA1

7f88cf7634a633bf2d311fb1f24726c5d5a88259
SHA256

4064c1351b8230044acd3b03b5a4bc856c6cfb05676a42f041d8094297ea33ad
SHA512

7676810ebc8394fbd0b84e3b7f9d6e06afa8edf3e93e80aeacf842deacfb1a13190b1238ff2212ff4f1ad831388f4e862328547317a24ddecac0b229e3ca73bc
SSDEEP

24576:93KpBwAVg/iAsm4jsPGWjz+Toleqz7Pqyz+/m5ijbLHB:Uww0eooyTqyS/mEvjB

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  4064c1351b8230044acd3b03b5a4bc856c6cfb05676a42f041d8094297ea33ad
- Size
  
  1.1MB
- MD5
  
  07529dbc5603cacb426137b0fa110e46
- SHA1
  
  7f88cf7634a633bf2d311fb1f24726c5d5a88259
- SHA256
  
  4064c1351b8230044acd3b03b5a4bc856c6cfb05676a42f041d8094297ea33ad
- SHA512
  
  7676810ebc8394fbd0b84e3b7f9d6e06afa8edf3e93e80aeacf842deacfb1a13190b1238ff2212ff4f1ad831388f4e862328547317a24ddecac0b229e3ca73bc
- SSDEEP
  
  24576:93KpBwAVg/iAsm4jsPGWjz+Toleqz7Pqyz+/m5ijbLHB:Uww0eooyTqyS/mEvjB
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2