1c75fd25b88a16b4a12584f6e1ec350f0dc79df4cfd4a8992a20c9e1774bc938 | Triage

Sharing

General

Target

1c75fd25b88a16b4a12584f6e1ec350f0dc79df4cfd4a8992a20c9e1774bc938
Size

1.0MB
Sample

221202-a1tfvafh54
MD5

11427efd5938689cf0d0467fbf9fc542
SHA1

1707b300264849dc3260f672e32404d3e9524b7b
SHA256

1c75fd25b88a16b4a12584f6e1ec350f0dc79df4cfd4a8992a20c9e1774bc938
SHA512

9e8a5b3ac96ed7f0500ea7ed7db19aa789df406b166de771b47665556b3e06e653e59f614469a90fc783edccdac95ab73e10cb8f0839377d183f4c8af9008b9f
SSDEEP

24576:+tPzsaPxK4VBF6NHLsn5BB1nxdM6y9N1Fu0hy3la:koaPxNF6ent1x+6y9NtaY

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  1c75fd25b88a16b4a12584f6e1ec350f0dc79df4cfd4a8992a20c9e1774bc938
- Size
  
  1.0MB
- MD5
  
  11427efd5938689cf0d0467fbf9fc542
- SHA1
  
  1707b300264849dc3260f672e32404d3e9524b7b
- SHA256
  
  1c75fd25b88a16b4a12584f6e1ec350f0dc79df4cfd4a8992a20c9e1774bc938
- SHA512
  
  9e8a5b3ac96ed7f0500ea7ed7db19aa789df406b166de771b47665556b3e06e653e59f614469a90fc783edccdac95ab73e10cb8f0839377d183f4c8af9008b9f
- SSDEEP
  
  24576:+tPzsaPxK4VBF6NHLsn5BB1nxdM6y9N1Fu0hy3la:koaPxNF6ent1x+6y9NtaY
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2