76d1c120d7fd6a5cbcb2799c650b81a23220096cce22d7d2659a6a98b051985e | Triage

Sharing

General

Target

76d1c120d7fd6a5cbcb2799c650b81a23220096cce22d7d2659a6a98b051985e
Size

60KB
Sample

221201-2nmajshd53
MD5

a0068ae7ff0080ef15e60e1d213c53b1
SHA1

1685fd8007c01c2efc9f273f092cda13141fb0eb
SHA256

76d1c120d7fd6a5cbcb2799c650b81a23220096cce22d7d2659a6a98b051985e
SHA512

f71440dbfa9780d7edb4691a1a353099f4408b05479d7d91b9406a988fa3d15cebe196662306ea9aaad75d9c6a1a8f7659fb7c04568e455411768aec861d35cb
SSDEEP

768:ukpLA8BtBV0QJcW5wqInmNSfyvwx+BKXCJW+trdvsWCJn66kvORBX80X/s:3kQJcqwmIfj+ECJG/kvO40vs

Score

9^/10

collection spyware stealer

Malware Config

Targets

- Target
  
  76d1c120d7fd6a5cbcb2799c650b81a23220096cce22d7d2659a6a98b051985e
- Size
  
  60KB
- MD5
  
  a0068ae7ff0080ef15e60e1d213c53b1
- SHA1
  
  1685fd8007c01c2efc9f273f092cda13141fb0eb
- SHA256
  
  76d1c120d7fd6a5cbcb2799c650b81a23220096cce22d7d2659a6a98b051985e
- SHA512
  
  f71440dbfa9780d7edb4691a1a353099f4408b05479d7d91b9406a988fa3d15cebe196662306ea9aaad75d9c6a1a8f7659fb7c04568e455411768aec861d35cb
- SSDEEP
  
  768:ukpLA8BtBV0QJcW5wqInmNSfyvwx+BKXCJW+trdvsWCJn66kvORBX80X/s:3kQJcqwmIfj+ECJG/kvO40vs
Score

9^/10

collection spyware stealer
- Grants admin privileges
  Uses net.exe to modify the user's privileges.
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook accounts
  collection
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Account Manipulation

Privilege Escalation

Defense Evasion

Credential Access

Account Manipulation

Credentials in Files

Discovery

Process Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectionspywarestealer

behavioral2