0bd3e8e4d96bf943fc075bdc6a72ccd7d2192372bc63006278706961c9a1d719 | Triage

Sharing

General

Target

0bd3e8e4d96bf943fc075bdc6a72ccd7d2192372bc63006278706961c9a1d719
Size

1.0MB
Sample

221129-m2dg8scc48
MD5

eb349c28a550a74edbd4bdd57030bd7b
SHA1

99d998878ab0d07f3481139ba4275322c4936150
SHA256

0bd3e8e4d96bf943fc075bdc6a72ccd7d2192372bc63006278706961c9a1d719
SHA512

8b35a84104d4a5b8907d8910791f3b878cde230a7c96164d464a06003871f07b54a01511be004e390be3ea94452edecda93b08d3e27e6a3b9f65516fc9ac7782
SSDEEP

24576:v95uqjWw1f0QCp4iUTXOkP0IifXXa1+sNsuqYZnI5C:l4j+f0Q+4i2OkP0I8Xe+s9q6IY

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  0bd3e8e4d96bf943fc075bdc6a72ccd7d2192372bc63006278706961c9a1d719
- Size
  
  1.0MB
- MD5
  
  eb349c28a550a74edbd4bdd57030bd7b
- SHA1
  
  99d998878ab0d07f3481139ba4275322c4936150
- SHA256
  
  0bd3e8e4d96bf943fc075bdc6a72ccd7d2192372bc63006278706961c9a1d719
- SHA512
  
  8b35a84104d4a5b8907d8910791f3b878cde230a7c96164d464a06003871f07b54a01511be004e390be3ea94452edecda93b08d3e27e6a3b9f65516fc9ac7782
- SSDEEP
  
  24576:v95uqjWw1f0QCp4iUTXOkP0IifXXa1+sNsuqYZnI5C:l4j+f0Q+4i2OkP0I8Xe+s9q6IY
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2