db07696dcf7bdc794b281deac29c36a3354ddaf25351369fef345554acb90c20 | Triage

Sharing

General

Target

db07696dcf7bdc794b281deac29c36a3354ddaf25351369fef345554acb90c20
Size

513KB
Sample

221106-qt7ynaffhl
MD5

0731e6c78147b7eaa5c2d18fac36e53a
SHA1

25c08bab63b77e8f1df30a810666cce47442f8f9
SHA256

db07696dcf7bdc794b281deac29c36a3354ddaf25351369fef345554acb90c20
SHA512

e1694839bbd06447954c313409a3f68a585e99c8376473c72d1c1751e9c41bae4103b8785723d2aa2c0df09b36afd3e1ae81c41872b714064219373e261f0d56
SSDEEP

6144:1/T3zd9AVAixibDqwbKhqjX9kjeKHYFqoECLrLnZF7tGUP+BgkTbXD/3/jBe0:1/XM4DShe9EcHPLrLZ5AICgkTP3/80

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  db07696dcf7bdc794b281deac29c36a3354ddaf25351369fef345554acb90c20
- Size
  
  513KB
- MD5
  
  0731e6c78147b7eaa5c2d18fac36e53a
- SHA1
  
  25c08bab63b77e8f1df30a810666cce47442f8f9
- SHA256
  
  db07696dcf7bdc794b281deac29c36a3354ddaf25351369fef345554acb90c20
- SHA512
  
  e1694839bbd06447954c313409a3f68a585e99c8376473c72d1c1751e9c41bae4103b8785723d2aa2c0df09b36afd3e1ae81c41872b714064219373e261f0d56
- SSDEEP
  
  6144:1/T3zd9AVAixibDqwbKhqjX9kjeKHYFqoECLrLnZF7tGUP+BgkTbXD/3/jBe0:1/XM4DShe9EcHPLrLZ5AICgkTP3/80
Score

7^/10

spyware stealer
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Reads local data of messenger clients
  Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2