74ab786eb3393fca32d0cd1672073f239fe5438b8b257351e379df6559394a96 | Triage

Sharing

General

Target

74ab786eb3393fca32d0cd1672073f239fe5438b8b257351e379df6559394a96
Size

100KB
Sample

221106-nqyjpscaeq
MD5

045f4a7c0cd783f39383ee8cf7b388b4
SHA1

3e4d9774dafa78010c302f94b7d485581fa6b5e7
SHA256

74ab786eb3393fca32d0cd1672073f239fe5438b8b257351e379df6559394a96
SHA512

d15bbcd14a9123ac39d4a85b350f39922de17a29fa5f3342d0961bfcda3d5b118379b8fb22a5c186e57d97c2395a58187702c015b2c5c8da296fc552d15e2cfc
SSDEEP

1536:EL0iO60zY0y5NTm6/E9eWO2+FPv/D6bibT2uRQEYEqM:UHFl5m60cT2uRQEYBM

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  74ab786eb3393fca32d0cd1672073f239fe5438b8b257351e379df6559394a96
- Size
  
  100KB
- MD5
  
  045f4a7c0cd783f39383ee8cf7b388b4
- SHA1
  
  3e4d9774dafa78010c302f94b7d485581fa6b5e7
- SHA256
  
  74ab786eb3393fca32d0cd1672073f239fe5438b8b257351e379df6559394a96
- SHA512
  
  d15bbcd14a9123ac39d4a85b350f39922de17a29fa5f3342d0961bfcda3d5b118379b8fb22a5c186e57d97c2395a58187702c015b2c5c8da296fc552d15e2cfc
- SSDEEP
  
  1536:EL0iO60zY0y5NTm6/E9eWO2+FPv/D6bibT2uRQEYEqM:UHFl5m60cT2uRQEYBM
Score

7^/10

spyware stealer
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2