244d4d8b53a0e0c9ff019c8cf4f0004a4960e46357a89f73be2201e6f6c384cc | Triage

Sharing

General

Target

244d4d8b53a0e0c9ff019c8cf4f0004a4960e46357a89f73be2201e6f6c384cc
Size

5.8MB
Sample

221016-ngkaqahdbr
MD5

b940a9157e2f580bbaa7e691ea84d205
SHA1

8418876ca893537b99a940bfd09fcb06617c7cb6
SHA256

244d4d8b53a0e0c9ff019c8cf4f0004a4960e46357a89f73be2201e6f6c384cc
SHA512

4827644dd4389c56d44d09cef11b7c537fd92a1127fd940cf8b9ac2258203e6002ec9643fcc711257c3b1474e7655835c5faf60a45582ab3cf71077e2ef1d35f
SSDEEP

49152:qnV9xaGFe6iRyhJ3jkqQVSfWVXqASv1x1dKO/5t7WGiocfGJDcjQcy20RHrzKgiR:qnV9xeSjL+EnHOMz5ysZA5+bf6c

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  244d4d8b53a0e0c9ff019c8cf4f0004a4960e46357a89f73be2201e6f6c384cc
- Size
  
  5.8MB
- MD5
  
  b940a9157e2f580bbaa7e691ea84d205
- SHA1
  
  8418876ca893537b99a940bfd09fcb06617c7cb6
- SHA256
  
  244d4d8b53a0e0c9ff019c8cf4f0004a4960e46357a89f73be2201e6f6c384cc
- SHA512
  
  4827644dd4389c56d44d09cef11b7c537fd92a1127fd940cf8b9ac2258203e6002ec9643fcc711257c3b1474e7655835c5faf60a45582ab3cf71077e2ef1d35f
- SSDEEP
  
  49152:qnV9xaGFe6iRyhJ3jkqQVSfWVXqASv1x1dKO/5t7WGiocfGJDcjQcy20RHrzKgiR:qnV9xeSjL+EnHOMz5ysZA5+bf6c
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1