eebdd126a11fe19a6888ff859b7e598c42b3b3353ffc8ae0f07f6f9e0927dc62 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eebdd126a11fe19a6888ff859b7e598c42b3b3353ffc8ae0f07f6f9e0927dc62
Size

414KB
Sample

221011-v1hdssfea7
MD5

7baa55fa966dfabd3fa0ce276b17d460
SHA1

daa54cb2ef5d3394a14bc41a9d1b2d46ae0eca51
SHA256

eebdd126a11fe19a6888ff859b7e598c42b3b3353ffc8ae0f07f6f9e0927dc62
SHA512

5d50c8f29fdc28f5cc55af3b47a7680c2c5369c30bdf7b5a352472faaddf9a015942381b7469032f17746700a4e5ca7b60d2da9ef551aeabf83987acd616a8a5
SSDEEP

12288:i7ujElO250mO7XN5nQ9Zpjd+IRyS1PdQNRIACsk:iME0jXNuhgIRyCPmiA1k

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  eebdd126a11fe19a6888ff859b7e598c42b3b3353ffc8ae0f07f6f9e0927dc62
- Size
  
  414KB
- MD5
  
  7baa55fa966dfabd3fa0ce276b17d460
- SHA1
  
  daa54cb2ef5d3394a14bc41a9d1b2d46ae0eca51
- SHA256
  
  eebdd126a11fe19a6888ff859b7e598c42b3b3353ffc8ae0f07f6f9e0927dc62
- SHA512
  
  5d50c8f29fdc28f5cc55af3b47a7680c2c5369c30bdf7b5a352472faaddf9a015942381b7469032f17746700a4e5ca7b60d2da9ef551aeabf83987acd616a8a5
- SSDEEP
  
  12288:i7ujElO250mO7XN5nQ9Zpjd+IRyS1PdQNRIACsk:iME0jXNuhgIRyCPmiA1k
Score

7^/10

persistence spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer