52513b321daea2af8fdeecd2fcfb33fd79b54088709dbc536b02423e69e9ce08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52513b321daea2af8fdeecd2fcfb33fd79b54088709dbc536b02423e69e9ce08
Size

341KB
Sample

221003-cww3aacbh6
MD5

29f109e24b1f846135985aa92cc7df77
SHA1

3ae5ec3f91715bc2d62b79cdbceed41e565a166e
SHA256

52513b321daea2af8fdeecd2fcfb33fd79b54088709dbc536b02423e69e9ce08
SHA512

46bb58c5a99128b547c4d51030a562221bc11727387d4fc5d6805067ce344ffc02941d7aa2dd6382bbb3251c9e534fa485b61eaf65b4342848f240365aa3c39d
SSDEEP

6144:LpElP0Apr+u44hYk/U78vr+u44hYk/U78OQzCr+u44hYa/U78:LpERxMWVoAMWVomzIMWJo

Score

7^/10

evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  52513b321daea2af8fdeecd2fcfb33fd79b54088709dbc536b02423e69e9ce08
- Size
  
  341KB
- MD5
  
  29f109e24b1f846135985aa92cc7df77
- SHA1
  
  3ae5ec3f91715bc2d62b79cdbceed41e565a166e
- SHA256
  
  52513b321daea2af8fdeecd2fcfb33fd79b54088709dbc536b02423e69e9ce08
- SHA512
  
  46bb58c5a99128b547c4d51030a562221bc11727387d4fc5d6805067ce344ffc02941d7aa2dd6382bbb3251c9e534fa485b61eaf65b4342848f240365aa3c39d
- SSDEEP
  
  6144:LpElP0Apr+u44hYk/U78vr+u44hYk/U78OQzCr+u44hYa/U78:LpERxMWVoAMWVomzIMWJo
Score

7^/10

evasion spyware stealer trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionspywarestealertrojan

behavioral2