4ce4b0cb4cfc3f7a3340b81c25957da6fedb366c790af1cbdb240a80c237176d | Triage

Sharing

General

Target

4ce4b0cb4cfc3f7a3340b81c25957da6fedb366c790af1cbdb240a80c237176d
Size

1.0MB
Sample

221129-k7pfkshf4t
MD5

daec54343fbc46d09d2fb881531b13dc
SHA1

7a58065d3c04d8350d0238503196581790a14397
SHA256

4ce4b0cb4cfc3f7a3340b81c25957da6fedb366c790af1cbdb240a80c237176d
SHA512

f1dc2f8fb759bdc92af42db7f386820407e1569a8cde437ff0ab49566bc11d8115415c7cee1ab599ac2be9cf5b5d45f47c0dcfb7c05d96127b7f26e927c499a4
SSDEEP

24576:yB8+mu4DXEz/XVsR0FJc78OhJBgRPflYm8CcP2FRGmbl+aoNt8Z:yOgWe+EYmEaoNw

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  4ce4b0cb4cfc3f7a3340b81c25957da6fedb366c790af1cbdb240a80c237176d
- Size
  
  1.0MB
- MD5
  
  daec54343fbc46d09d2fb881531b13dc
- SHA1
  
  7a58065d3c04d8350d0238503196581790a14397
- SHA256
  
  4ce4b0cb4cfc3f7a3340b81c25957da6fedb366c790af1cbdb240a80c237176d
- SHA512
  
  f1dc2f8fb759bdc92af42db7f386820407e1569a8cde437ff0ab49566bc11d8115415c7cee1ab599ac2be9cf5b5d45f47c0dcfb7c05d96127b7f26e927c499a4
- SSDEEP
  
  24576:yB8+mu4DXEz/XVsR0FJc78OhJBgRPflYm8CcP2FRGmbl+aoNt8Z:yOgWe+EYmEaoNw
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2