6e89207dde0d162a73640353fd7100ce243ec10ad78ea5c1509d0da83f3ee2f1 | Triage

Sharing

General

Target

6e89207dde0d162a73640353fd7100ce243ec10ad78ea5c1509d0da83f3ee2f1
Size

5.8MB
Sample

221015-z9xmasgcdq
MD5

a99f3bde50029a27c5ed0a4f3d9dc157
SHA1

38c5b905e9691e9643c9187985ab60c88a8688ab
SHA256

6e89207dde0d162a73640353fd7100ce243ec10ad78ea5c1509d0da83f3ee2f1
SHA512

38f8efe5f3f619d6b673f19f44f5346db23c6c0c1bf266a2fdc973df083d8b683d19aedf0baa398df52bc37ff224aa20b3390bc1b2dd451a12ca5ac11b0fdb95
SSDEEP

49152:qnV9xagFe6iRyhJ3jkqQVSfWVXqASv1x1dKO/5t7WGiocfGJDcjQcy20RHrzKgiR:qnV9xoSjL+EnHOMz5ysZA5+bf6c

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  6e89207dde0d162a73640353fd7100ce243ec10ad78ea5c1509d0da83f3ee2f1
- Size
  
  5.8MB
- MD5
  
  a99f3bde50029a27c5ed0a4f3d9dc157
- SHA1
  
  38c5b905e9691e9643c9187985ab60c88a8688ab
- SHA256
  
  6e89207dde0d162a73640353fd7100ce243ec10ad78ea5c1509d0da83f3ee2f1
- SHA512
  
  38f8efe5f3f619d6b673f19f44f5346db23c6c0c1bf266a2fdc973df083d8b683d19aedf0baa398df52bc37ff224aa20b3390bc1b2dd451a12ca5ac11b0fdb95
- SSDEEP
  
  49152:qnV9xagFe6iRyhJ3jkqQVSfWVXqASv1x1dKO/5t7WGiocfGJDcjQcy20RHrzKgiR:qnV9xoSjL+EnHOMz5ysZA5+bf6c
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1