a51965b83aa781d74dfaa494891dd8bbe9909f51132b80debf0111f1ae2c69db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a51965b83aa781d74dfaa494891dd8bbe9909f51132b80debf0111f1ae2c69db
Size

6.3MB
Sample

221017-ps3f4sbgh3
MD5

88b198508d4fcbc156e79d1eb2b78b85
SHA1

62770942aa1c5681dca1421bf7dfe7c2c8121290
SHA256

a51965b83aa781d74dfaa494891dd8bbe9909f51132b80debf0111f1ae2c69db
SHA512

b4b6204092694f18e218afe4092b10b049319a574e9d8d96dd7313e652e87339d0bf4b45e58153543622820e3b1728d42829fabfab4d7ad0e824569a6edda8bd
SSDEEP

49152:bkmZbQsxBXQbKXmugFe6iRyhJ3jkqQVSfWVXqASv1x1dKO/5t7WGiocfGJDcjQcr:bkcbf6bKXzSjL+EnHOMz5ysZA5+bf6c

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  a51965b83aa781d74dfaa494891dd8bbe9909f51132b80debf0111f1ae2c69db
- Size
  
  6.3MB
- MD5
  
  88b198508d4fcbc156e79d1eb2b78b85
- SHA1
  
  62770942aa1c5681dca1421bf7dfe7c2c8121290
- SHA256
  
  a51965b83aa781d74dfaa494891dd8bbe9909f51132b80debf0111f1ae2c69db
- SHA512
  
  b4b6204092694f18e218afe4092b10b049319a574e9d8d96dd7313e652e87339d0bf4b45e58153543622820e3b1728d42829fabfab4d7ad0e824569a6edda8bd
- SSDEEP
  
  49152:bkmZbQsxBXQbKXmugFe6iRyhJ3jkqQVSfWVXqASv1x1dKO/5t7WGiocfGJDcjQcr:bkcbf6bKXzSjL+EnHOMz5ysZA5+bf6c
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1