3100c094e0adf9dae8e234095170fbcb5533c62ef08fcd9af892672b669c9d5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3100c094e0adf9dae8e234095170fbcb5533c62ef08fcd9af892672b669c9d5b
Size

1.0MB
Sample

221202-amp69seg44
MD5

3678d5bee06a37e5c3698c234ad794c5
SHA1

774f3c5c2585bc2fd3834d0fc2662b613a91fdd8
SHA256

3100c094e0adf9dae8e234095170fbcb5533c62ef08fcd9af892672b669c9d5b
SHA512

567c8fffe7ab79ef5d1217a48c2aec283219dc131c13ad65e1016c5f981dc525bc822d7af7ed3ebf0146e58b82637a22b9a2fd77cace3807f53a541561115fec
SSDEEP

24576:WtPzsaPxK4VBF6NHLsn5BB1nxdM6y9N1Fu0hyRl/:soaPxNF6ent1x+6y9Nt0d

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  3100c094e0adf9dae8e234095170fbcb5533c62ef08fcd9af892672b669c9d5b
- Size
  
  1.0MB
- MD5
  
  3678d5bee06a37e5c3698c234ad794c5
- SHA1
  
  774f3c5c2585bc2fd3834d0fc2662b613a91fdd8
- SHA256
  
  3100c094e0adf9dae8e234095170fbcb5533c62ef08fcd9af892672b669c9d5b
- SHA512
  
  567c8fffe7ab79ef5d1217a48c2aec283219dc131c13ad65e1016c5f981dc525bc822d7af7ed3ebf0146e58b82637a22b9a2fd77cace3807f53a541561115fec
- SSDEEP
  
  24576:WtPzsaPxK4VBF6NHLsn5BB1nxdM6y9N1Fu0hyRl/:soaPxNF6ent1x+6y9Nt0d
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2