2d1104198cbaa3d3156cb2b2ada3d359df33264b8f4961f1d7610961bf135090 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d1104198cbaa3d3156cb2b2ada3d359df33264b8f4961f1d7610961bf135090
Size

1.0MB
Sample

221201-grnmkaba24
MD5

30be2eec43bf06161b5cd51bd6cd811c
SHA1

61347ebf7d4473d672400acda1245f818069506b
SHA256

2d1104198cbaa3d3156cb2b2ada3d359df33264b8f4961f1d7610961bf135090
SHA512

d166be32110b7e3e1cb705d8391bdb99c692b6013b825279cb1be87e8c2124d53ba8af9c70d839c8c906577fea3c34ab8e3946ad193b81dcbd740625e0e06b64
SSDEEP

24576:fB8+mu4DXEz/XVsR0FJc78OhJBgRPflYm8CcP2FRGmbl+aoNtL3:fOgWe+EYmEaoN5

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2d1104198cbaa3d3156cb2b2ada3d359df33264b8f4961f1d7610961bf135090
- Size
  
  1.0MB
- MD5
  
  30be2eec43bf06161b5cd51bd6cd811c
- SHA1
  
  61347ebf7d4473d672400acda1245f818069506b
- SHA256
  
  2d1104198cbaa3d3156cb2b2ada3d359df33264b8f4961f1d7610961bf135090
- SHA512
  
  d166be32110b7e3e1cb705d8391bdb99c692b6013b825279cb1be87e8c2124d53ba8af9c70d839c8c906577fea3c34ab8e3946ad193b81dcbd740625e0e06b64
- SSDEEP
  
  24576:fB8+mu4DXEz/XVsR0FJc78OhJBgRPflYm8CcP2FRGmbl+aoNtL3:fOgWe+EYmEaoN5
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2