e48cf42b8baa9e6a3f22dfcd1b2c9e607399b9c6e4171b4ae5cdafc63e15d53f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e48cf42b8baa9e6a3f22dfcd1b2c9e607399b9c6e4171b4ae5cdafc63e15d53f
Size

36KB
Sample

221001-3vqf8adgdm
MD5

35e2b4192a5abebe502047ea9e812f52
SHA1

349da18681bf5bf8e001f3484c6c325024ad7e8b
SHA256

e48cf42b8baa9e6a3f22dfcd1b2c9e607399b9c6e4171b4ae5cdafc63e15d53f
SHA512

641e313e4f616f1b2b73337705d1497827929f0a819dd95e8a97c590db2bef2b461f249d52e07fe61f4495c88e2db2729c04468cf0ad178b98df1211b017bc0e
SSDEEP

384:/50mXMp8zvuosOBwRgooBMBjok7+c1DTmm/Scm+:rHCosOQNkBYlKJ

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  e48cf42b8baa9e6a3f22dfcd1b2c9e607399b9c6e4171b4ae5cdafc63e15d53f
- Size
  
  36KB
- MD5
  
  35e2b4192a5abebe502047ea9e812f52
- SHA1
  
  349da18681bf5bf8e001f3484c6c325024ad7e8b
- SHA256
  
  e48cf42b8baa9e6a3f22dfcd1b2c9e607399b9c6e4171b4ae5cdafc63e15d53f
- SHA512
  
  641e313e4f616f1b2b73337705d1497827929f0a819dd95e8a97c590db2bef2b461f249d52e07fe61f4495c88e2db2729c04468cf0ad178b98df1211b017bc0e
- SSDEEP
  
  384:/50mXMp8zvuosOBwRgooBMBjok7+c1DTmm/Scm+:rHCosOQNkBYlKJ
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2