de4bd677901ef7aef00fc2757bca1618c42c7e65ba0d4ad04af3d3fa516361ab | Triage

Sharing

General

Target

de4bd677901ef7aef00fc2757bca1618c42c7e65ba0d4ad04af3d3fa516361ab
Size

84KB
Sample

221004-bjxydafba9
MD5

6831d43d092e52fd8095c4a192166bf0
SHA1

d681fc48f45340a2860268df9e3481261e5c2e1f
SHA256

de4bd677901ef7aef00fc2757bca1618c42c7e65ba0d4ad04af3d3fa516361ab
SHA512

628038f70a7d225def15e30b97371d7360e53d145eb01ecf8039b4567bfd5f1bedb7fd462e5e2edb1a9a5be458c49e5a4bafae3b9b2da76d2b7b9ecf4faadea3
SSDEEP

1536:UJwsHslhVsETri9gF8CIL7lpL2lwvgWC5fFG6ToSqkIXg02Qw:UJwNToCIL7OlGgWC5fFG6TVqkIXg02Qw

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  de4bd677901ef7aef00fc2757bca1618c42c7e65ba0d4ad04af3d3fa516361ab
- Size
  
  84KB
- MD5
  
  6831d43d092e52fd8095c4a192166bf0
- SHA1
  
  d681fc48f45340a2860268df9e3481261e5c2e1f
- SHA256
  
  de4bd677901ef7aef00fc2757bca1618c42c7e65ba0d4ad04af3d3fa516361ab
- SHA512
  
  628038f70a7d225def15e30b97371d7360e53d145eb01ecf8039b4567bfd5f1bedb7fd462e5e2edb1a9a5be458c49e5a4bafae3b9b2da76d2b7b9ecf4faadea3
- SSDEEP
  
  1536:UJwsHslhVsETri9gF8CIL7lpL2lwvgWC5fFG6ToSqkIXg02Qw:UJwNToCIL7OlGgWC5fFG6TVqkIXg02Qw
Score

7^/10

spyware stealer
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2