fc1b0a099146e9839ea978deb2fa554ab434c183a47e414c684f6209fc6962c3 | Triage

Sharing

General

Target

fc1b0a099146e9839ea978deb2fa554ab434c183a47e414c684f6209fc6962c3
Size

204KB
Sample

221124-t18ejsfd49
MD5

746ff3610cdc083a885e38f7cb60f514
SHA1

41580ad0d1dd4699503ddccc2f97a048837c40b0
SHA256

fc1b0a099146e9839ea978deb2fa554ab434c183a47e414c684f6209fc6962c3
SHA512

3ea21cbd9e92f47eb886e46d4236896cb9881f3943e7a5b6ffc6a88d25b0aa55e49e021719499eb96ae526e2f8ebac04bafee9b3d0ec2333f2fd49ea795cc217
SSDEEP

3072:fV1rnlzPUkCuW3zykixxTakHhY6pd23LaXfR6MnJnmjF:NVCjmWGplBRmjF

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  fc1b0a099146e9839ea978deb2fa554ab434c183a47e414c684f6209fc6962c3
- Size
  
  204KB
- MD5
  
  746ff3610cdc083a885e38f7cb60f514
- SHA1
  
  41580ad0d1dd4699503ddccc2f97a048837c40b0
- SHA256
  
  fc1b0a099146e9839ea978deb2fa554ab434c183a47e414c684f6209fc6962c3
- SHA512
  
  3ea21cbd9e92f47eb886e46d4236896cb9881f3943e7a5b6ffc6a88d25b0aa55e49e021719499eb96ae526e2f8ebac04bafee9b3d0ec2333f2fd49ea795cc217
- SSDEEP
  
  3072:fV1rnlzPUkCuW3zykixxTakHhY6pd23LaXfR6MnJnmjF:NVCjmWGplBRmjF
Score

7^/10

discovery spyware stealer
- Deletes itself
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer