0390a57e2f72f6b458c16694efd43ae3be4517ce2a75a68fb9623decedfa2da3 | Triage

Sharing

General

Target

0390a57e2f72f6b458c16694efd43ae3be4517ce2a75a68fb9623decedfa2da3.exe
Size

540KB
Sample

221201-ctmqtsfb99
MD5

6bd61f6899b70f05fd24ca99c5f10d74
SHA1

919eac6ff350efe3dc56b86e5d54776f0cc05008
SHA256

0390a57e2f72f6b458c16694efd43ae3be4517ce2a75a68fb9623decedfa2da3
SHA512

415f14873f49a9cbebf93945ca0dea2333779e38ed416594c3c4696911c2fc2ac280c03838391f60c80ce200816e0fecfd6aba97bbc0c4fbfcd27dbb6368698f
SSDEEP

12288:O5NZO1GPbLMAi3yMHsYlOgKz7Qj+4Cfr+cZU0HA/3fi7X:wNZtfRi3yUu7aCfi30HwKD

Score

8^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  0390a57e2f72f6b458c16694efd43ae3be4517ce2a75a68fb9623decedfa2da3.exe
- Size
  
  540KB
- MD5
  
  6bd61f6899b70f05fd24ca99c5f10d74
- SHA1
  
  919eac6ff350efe3dc56b86e5d54776f0cc05008
- SHA256
  
  0390a57e2f72f6b458c16694efd43ae3be4517ce2a75a68fb9623decedfa2da3
- SHA512
  
  415f14873f49a9cbebf93945ca0dea2333779e38ed416594c3c4696911c2fc2ac280c03838391f60c80ce200816e0fecfd6aba97bbc0c4fbfcd27dbb6368698f
- SSDEEP
  
  12288:O5NZO1GPbLMAi3yMHsYlOgKz7Qj+4Cfr+cZU0HA/3fi7X:wNZtfRi3yUu7aCfi30HwKD
Score

8^/10

persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer