56de6d3792cef04ed92334d27e752a647de8d7419b447a04e913864303a457b5 | Triage

Sharing

General

Target

56de6d3792cef04ed92334d27e752a647de8d7419b447a04e913864303a457b5
Size

1.0MB
Sample

221201-3p7hjsga3w
MD5

8b4f9c912be9bb439d4fd641e654ef9a
SHA1

499a05772b2a4d7f14cf7831b5ff1d42ee0193eb
SHA256

56de6d3792cef04ed92334d27e752a647de8d7419b447a04e913864303a457b5
SHA512

437efa3dbdd98960220465dc6682d5717d01dd8725ce8d94ff548f39f613ab5ac429739e72220b3935d01447dabf0c2006032e9267f782826de1849f43e91bb9
SSDEEP

24576:p4bVUFIbQDuggc3clq/XvH8THaWSN3XlfMqbiSlyPTt:pEeKQDNSQv2HDE3XL3q

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  56de6d3792cef04ed92334d27e752a647de8d7419b447a04e913864303a457b5
- Size
  
  1.0MB
- MD5
  
  8b4f9c912be9bb439d4fd641e654ef9a
- SHA1
  
  499a05772b2a4d7f14cf7831b5ff1d42ee0193eb
- SHA256
  
  56de6d3792cef04ed92334d27e752a647de8d7419b447a04e913864303a457b5
- SHA512
  
  437efa3dbdd98960220465dc6682d5717d01dd8725ce8d94ff548f39f613ab5ac429739e72220b3935d01447dabf0c2006032e9267f782826de1849f43e91bb9
- SSDEEP
  
  24576:p4bVUFIbQDuggc3clq/XvH8THaWSN3XlfMqbiSlyPTt:pEeKQDNSQv2HDE3XL3q
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2