8e44bfabd86296863da209f44b2a0b90494e664bf874e8c629c353f4f33c524b | Triage

Sharing

General

Target

8e44bfabd86296863da209f44b2a0b90494e664bf874e8c629c353f4f33c524b
Size

101KB
Sample

221123-qzh7gsac71
MD5

f8399fad84cb44e99d39c6c0591c2743
SHA1

9195dd103308462a9750d7a200186ff012accd80
SHA256

8e44bfabd86296863da209f44b2a0b90494e664bf874e8c629c353f4f33c524b
SHA512

cdd12a353d2a85c1f354788fe5ccdf4bed5e65c9406e099055e5e1f032f605909a9db86639502e629c83be5a54b90fc076c272cc9c7b4a2177859bff7c512ba0
SSDEEP

3072:qMa1XnOUgJ1OTsUKBJmkPlzcQGJBW+XCXuY:qT1XLuOTmfmkPlzc9JB5y+

Score

10^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  8e44bfabd86296863da209f44b2a0b90494e664bf874e8c629c353f4f33c524b
- Size
  
  101KB
- MD5
  
  f8399fad84cb44e99d39c6c0591c2743
- SHA1
  
  9195dd103308462a9750d7a200186ff012accd80
- SHA256
  
  8e44bfabd86296863da209f44b2a0b90494e664bf874e8c629c353f4f33c524b
- SHA512
  
  cdd12a353d2a85c1f354788fe5ccdf4bed5e65c9406e099055e5e1f032f605909a9db86639502e629c83be5a54b90fc076c272cc9c7b4a2177859bff7c512ba0
- SSDEEP
  
  3072:qMa1XnOUgJ1OTsUKBJmkPlzcQGJBW+XCXuY:qT1XLuOTmfmkPlzc9JB5y+
Score

10^/10

persistence spyware stealer
- Modifies WinLogon for persistence
  persistence
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer