6286e0e17635785211daca4b1132456ad6fc461b2ccbd67e847fb79d1bf0ac76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6286e0e17635785211daca4b1132456ad6fc461b2ccbd67e847fb79d1bf0ac76
Size

344KB
Sample

221106-qvba3sffhp
MD5

08afe2f93c4b1fec82c6da438b9d86c7
SHA1

3f1445f0e8c648d0bf4855f80a69fc692bd3a64f
SHA256

6286e0e17635785211daca4b1132456ad6fc461b2ccbd67e847fb79d1bf0ac76
SHA512

edc7d7f74ec0be44d5ab4f52b289c9267f7a118119e39468c177976f32d76ecfad6eddec385f2cdcb4439b27b85ab38daac4486109f31f5e025fa7555cfceb7b
SSDEEP

6144:A/T3zd9AVAixibDqwbKhqjX9kjeKHYFqoECLrLnZF7tGUP+BgkTbXD/3/:A/XM4DShe9EcHPLrLZ5AICgkTP3/

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  6286e0e17635785211daca4b1132456ad6fc461b2ccbd67e847fb79d1bf0ac76
- Size
  
  344KB
- MD5
  
  08afe2f93c4b1fec82c6da438b9d86c7
- SHA1
  
  3f1445f0e8c648d0bf4855f80a69fc692bd3a64f
- SHA256
  
  6286e0e17635785211daca4b1132456ad6fc461b2ccbd67e847fb79d1bf0ac76
- SHA512
  
  edc7d7f74ec0be44d5ab4f52b289c9267f7a118119e39468c177976f32d76ecfad6eddec385f2cdcb4439b27b85ab38daac4486109f31f5e025fa7555cfceb7b
- SSDEEP
  
  6144:A/T3zd9AVAixibDqwbKhqjX9kjeKHYFqoECLrLnZF7tGUP+BgkTbXD/3/:A/XM4DShe9EcHPLrLZ5AICgkTP3/
Score

7^/10

spyware stealer
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Reads local data of messenger clients
  Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2