bd5278f99b15191fc1b97b9b0043d6902bccbabf7c431a413a2e33be8136d368 | Triage

Sharing

General

Target

bd5278f99b15191fc1b97b9b0043d6902bccbabf7c431a413a2e33be8136d368
Size

5.8MB
Sample

221015-f6fd3afccm
MD5

1bcf98c34a054c999c3d89748c1558b9
SHA1

fd9305ced7584b17fdd8fe74f58c06e87a4388e1
SHA256

bd5278f99b15191fc1b97b9b0043d6902bccbabf7c431a413a2e33be8136d368
SHA512

02229c07e59e0bb2175fc8f4ee66f17a4806f20ca4413a37e09c507e6af5bd3144d73e4c750a9832e1110dd43eb6b1b548ec8f76b020467f17050b514c01ef45
SSDEEP

49152:qnV9xaVFe6iRyhJ3jkqQVSfWVXqASv1x1dKO/5t7WGiocfGJDcjQcy20RHrzKgiR:qnV9xrSjL+EnHOMz5ysZA5+bf6c

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  bd5278f99b15191fc1b97b9b0043d6902bccbabf7c431a413a2e33be8136d368
- Size
  
  5.8MB
- MD5
  
  1bcf98c34a054c999c3d89748c1558b9
- SHA1
  
  fd9305ced7584b17fdd8fe74f58c06e87a4388e1
- SHA256
  
  bd5278f99b15191fc1b97b9b0043d6902bccbabf7c431a413a2e33be8136d368
- SHA512
  
  02229c07e59e0bb2175fc8f4ee66f17a4806f20ca4413a37e09c507e6af5bd3144d73e4c750a9832e1110dd43eb6b1b548ec8f76b020467f17050b514c01ef45
- SSDEEP
  
  49152:qnV9xaVFe6iRyhJ3jkqQVSfWVXqASv1x1dKO/5t7WGiocfGJDcjQcy20RHrzKgiR:qnV9xrSjL+EnHOMz5ysZA5+bf6c
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1