2ed1ed1a7fcc1aa7ad61369cedc39718cd1e93748b88d989cbeaa9c98b7f87b1 | Triage

Resubmissions

27-11-2022 00:51

221127-a7sg5agf85 7

26-11-2022 22:17

221126-17m6hsch5t 7

Sharing

General

Target

2ed1ed1a7fcc1aa7ad61369cedc39718cd1e93748b88d989cbeaa9c98b7f87b1
Size

4.4MB
Sample

221127-a7sg5agf85
MD5

867c71f074b9121542595bde9709c2b6
SHA1

faa029153fba48715e164d263b0df39dc5102ab6
SHA256

2ed1ed1a7fcc1aa7ad61369cedc39718cd1e93748b88d989cbeaa9c98b7f87b1
SHA512

1184c6bce6f9dbe4bbe0253e3a40d06fbb7d907f47dbbcb44bdb895b065985e4910f0e9e6dad2c4b832ab404c3f5f5271ccf47950c29a91bda1b5f67a24e2095
SSDEEP

49152:9ddj9ge0TmYUtHZ4jNPfiluylvkBEk060xav5EN5tGQnlrjGn01+:9CemoIPn9xEVG8lG

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2ed1ed1a7fcc1aa7ad61369cedc39718cd1e93748b88d989cbeaa9c98b7f87b1
- Size
  
  4.4MB
- MD5
  
  867c71f074b9121542595bde9709c2b6
- SHA1
  
  faa029153fba48715e164d263b0df39dc5102ab6
- SHA256
  
  2ed1ed1a7fcc1aa7ad61369cedc39718cd1e93748b88d989cbeaa9c98b7f87b1
- SHA512
  
  1184c6bce6f9dbe4bbe0253e3a40d06fbb7d907f47dbbcb44bdb895b065985e4910f0e9e6dad2c4b832ab404c3f5f5271ccf47950c29a91bda1b5f67a24e2095
- SSDEEP
  
  49152:9ddj9ge0TmYUtHZ4jNPfiluylvkBEk060xav5EN5tGQnlrjGn01+:9CemoIPn9xEVG8lG
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2