2b9e6acfad56d16e4c1f84c48fd2c7278d8bdb2def070b27e4130b34b48e1fe4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b9e6acfad56d16e4c1f84c48fd2c7278d8bdb2def070b27e4130b34b48e1fe4
Size

1.0MB
Sample

221202-aqfr1afa64
MD5

74e7d0d83d38a292cb44d429d70868b7
SHA1

9f3f9ecaa9adbd6ab599591a3102920c7053a2ec
SHA256

2b9e6acfad56d16e4c1f84c48fd2c7278d8bdb2def070b27e4130b34b48e1fe4
SHA512

8ac23d7c21014a32268c9c40897cda4eaf91c4d1b152b306cce989023f59031f6ff49b6c28e9666d5ce1ddc7cf5a3c14517460118ba0e8675bca7cac9a0d9c74
SSDEEP

12288:Gs05EW5k2yfDLuLtc7YI4QcOTLCQhiv0KxjeU/S23v3QQ5buN3W5pKo:GT5EWU+LtKYIX3CTxJeU/vF5buNmGo

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2b9e6acfad56d16e4c1f84c48fd2c7278d8bdb2def070b27e4130b34b48e1fe4
- Size
  
  1.0MB
- MD5
  
  74e7d0d83d38a292cb44d429d70868b7
- SHA1
  
  9f3f9ecaa9adbd6ab599591a3102920c7053a2ec
- SHA256
  
  2b9e6acfad56d16e4c1f84c48fd2c7278d8bdb2def070b27e4130b34b48e1fe4
- SHA512
  
  8ac23d7c21014a32268c9c40897cda4eaf91c4d1b152b306cce989023f59031f6ff49b6c28e9666d5ce1ddc7cf5a3c14517460118ba0e8675bca7cac9a0d9c74
- SSDEEP
  
  12288:Gs05EW5k2yfDLuLtc7YI4QcOTLCQhiv0KxjeU/S23v3QQ5buN3W5pKo:GT5EWU+LtKYIX3CTxJeU/vF5buNmGo
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2