b438c8014f5a5c3fe53b1e31eedfbeeb53f1769b6bdd01f7789b1f6fa563d761 | Triage

Sharing

General

Target

e7374a3329cfd52164b21c09ec8926f69940a25bac3dea9a1b4809e70e266b46
Size

3.4MB
Sample

221017-cxffxsaefp
MD5

5a037e7a9c5f719ad471f1f9d11dee86
SHA1

a745c45d1f6b9f00aa6574307f23c3648f2281e4
SHA256

b438c8014f5a5c3fe53b1e31eedfbeeb53f1769b6bdd01f7789b1f6fa563d761
SHA512

4719ecc0018b2976f9ab49902f6c15128d6d0ae925669ecf97ebe9558ec910d49e95271853d42066bd1097ebd3724bc65a30da528c3df98b05e74c149c5472cb
SSDEEP

98304:jbXzr2wX4LPP9/2zAOVv3YXXJGNjBZUlm1SyvAmuj:nXXRoLV+Z3O+1ZU81PAH

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  e7374a3329cfd52164b21c09ec8926f69940a25bac3dea9a1b4809e70e266b46
- Size
  
  5.8MB
- MD5
  
  86039bb089c75cf42a34c303c1d2b2a9
- SHA1
  
  da6dbbbf1a16ebb4ee0373894a6f7706caf576d4
- SHA256
  
  e7374a3329cfd52164b21c09ec8926f69940a25bac3dea9a1b4809e70e266b46
- SHA512
  
  d0d39f4c51be5531ff74c4255ca8832c8637b604c6bac8e76ea72f66b8f8a642cbdb46c8761a9b11f5f77b0aa7925307bda672bc3c4d5b956c92f0f802617cc8
- SSDEEP
  
  49152:qnV9xa5Fe6iRyhJ3jkqQVSfWVXqASv1x1dKO/5t7WGiocfGJDcjQcy20RHrzKgiR:qnV9xTSjL+EnHOMz5ysZA5+bf6c
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2