4235d9d3e97ce1ec3c183df9f719796399affd3790e22df1f5ae907cf07394bd | Triage

Sharing

General

Target

4235d9d3e97ce1ec3c183df9f719796399affd3790e22df1f5ae907cf07394bd
Size

919KB
Sample

221124-e9kbrahf67
MD5

29beaabe26c11c370d40ae6816cae6bc
SHA1

d0e77592b573ebe099e9880a08b7c0da651569ab
SHA256

4235d9d3e97ce1ec3c183df9f719796399affd3790e22df1f5ae907cf07394bd
SHA512

c4d44e997b8f51d9d7b59d4a458cb64f4073c4cf0051038be9b570a5b107c99e1910baf7e590bba7ea3d57db1a920ef9904e788d5187a2d03bedb8e688db03b8
SSDEEP

24576:/Uac7EJEhlpyouGViLlvOdjoJFRJHJ2rHbXza:/27E4LDVQvOdjoRJpOHy

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  4235d9d3e97ce1ec3c183df9f719796399affd3790e22df1f5ae907cf07394bd
- Size
  
  919KB
- MD5
  
  29beaabe26c11c370d40ae6816cae6bc
- SHA1
  
  d0e77592b573ebe099e9880a08b7c0da651569ab
- SHA256
  
  4235d9d3e97ce1ec3c183df9f719796399affd3790e22df1f5ae907cf07394bd
- SHA512
  
  c4d44e997b8f51d9d7b59d4a458cb64f4073c4cf0051038be9b570a5b107c99e1910baf7e590bba7ea3d57db1a920ef9904e788d5187a2d03bedb8e688db03b8
- SSDEEP
  
  24576:/Uac7EJEhlpyouGViLlvOdjoJFRJHJ2rHbXza:/27E4LDVQvOdjoRJpOHy
Score

8^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2