92b9fc928f7d678966292917b6d124298b23f74c35011c681af92cc4cbfd3f4f | Triage

Sharing

General

Target

92b9fc928f7d678966292917b6d124298b23f74c35011c681af92cc4cbfd3f4f
Size

5.8MB
Sample

221016-nxs8kahder
MD5

aa91de9959374554d6ce5ed91206523c
SHA1

e4e1e1747672940ac5aff7145707f66f790fbee1
SHA256

92b9fc928f7d678966292917b6d124298b23f74c35011c681af92cc4cbfd3f4f
SHA512

706d2741b4b0983ee66afa5eef75d684ea0d6bcff538cef9c10e1fe79c84ed52e78c50dfcf168af7c0fa0b98c8fb74d9414692fd39a511696fd36d94afdf58cd
SSDEEP

49152:qnV9xaaFe6iRyhJ3jkqQVSfWVXqASv1x1dKO/5t7WGiocfGJDcjQcy20RHrzKgiR:qnV9xWSjL+EnHOMz5ysZA5+bf6c

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  92b9fc928f7d678966292917b6d124298b23f74c35011c681af92cc4cbfd3f4f
- Size
  
  5.8MB
- MD5
  
  aa91de9959374554d6ce5ed91206523c
- SHA1
  
  e4e1e1747672940ac5aff7145707f66f790fbee1
- SHA256
  
  92b9fc928f7d678966292917b6d124298b23f74c35011c681af92cc4cbfd3f4f
- SHA512
  
  706d2741b4b0983ee66afa5eef75d684ea0d6bcff538cef9c10e1fe79c84ed52e78c50dfcf168af7c0fa0b98c8fb74d9414692fd39a511696fd36d94afdf58cd
- SSDEEP
  
  49152:qnV9xaaFe6iRyhJ3jkqQVSfWVXqASv1x1dKO/5t7WGiocfGJDcjQcy20RHrzKgiR:qnV9xWSjL+EnHOMz5ysZA5+bf6c
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1