f97d0c2274ff7fa45b2b4c435c0adadedf09ebb7a57c79daaa79dbec6a058d0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f97d0c2274ff7fa45b2b4c435c0adadedf09ebb7a57c79daaa79dbec6a058d0c
Size

2.6MB
Sample

221107-x9xk7aeda7
MD5

049ad41c3ed549c6eb4cbb6f489e035c
SHA1

a28e0a65b16b5be157681695a1bc4b2f7a08f186
SHA256

f97d0c2274ff7fa45b2b4c435c0adadedf09ebb7a57c79daaa79dbec6a058d0c
SHA512

80faacbcc5f837dc2cf610f5c895927d35a7e83c2dddabd680316a707ded9cdcaf58837eea72949941edf9b3c42674ef8a807cff2c04ee789f836f9545e2c2d0
SSDEEP

49152:U5epFvrA7VqFN/9UtpEd73VBbP7zwByo26r3tLiMoSzbqKM/ULLV/jb:sepFvU7VI/9D7lB3zwBn3gMoSHdcQx/3

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  f97d0c2274ff7fa45b2b4c435c0adadedf09ebb7a57c79daaa79dbec6a058d0c
- Size
  
  2.6MB
- MD5
  
  049ad41c3ed549c6eb4cbb6f489e035c
- SHA1
  
  a28e0a65b16b5be157681695a1bc4b2f7a08f186
- SHA256
  
  f97d0c2274ff7fa45b2b4c435c0adadedf09ebb7a57c79daaa79dbec6a058d0c
- SHA512
  
  80faacbcc5f837dc2cf610f5c895927d35a7e83c2dddabd680316a707ded9cdcaf58837eea72949941edf9b3c42674ef8a807cff2c04ee789f836f9545e2c2d0
- SSDEEP
  
  49152:U5epFvrA7VqFN/9UtpEd73VBbP7zwByo26r3tLiMoSzbqKM/ULLV/jb:sepFvU7VI/9D7lB3zwBn3gMoSHdcQx/3
Score

8^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2