bb05b1d633ac1e735eba4cae96594c00c1d5054b7e37408db9286c7ce1e396af | Triage

Sharing

General

Target

bb05b1d633ac1e735eba4cae96594c00c1d5054b7e37408db9286c7ce1e396af
Size

56KB
Sample

221203-rpk4rsgg33
MD5

6418f1a687d988c4c931e2a6336cd9d2
SHA1

0cfe153d379bebf61315b310fff9c6390aa03abb
SHA256

bb05b1d633ac1e735eba4cae96594c00c1d5054b7e37408db9286c7ce1e396af
SHA512

a35e4c77536485fbd67d26cb8122c5a75a731841808a275fbf50c4d3fe5719ccb2488dd01961bf1eb4814495b89ca666a385e1be16c1e374499f745ef654148e
SSDEEP

768:SvznLWXwCYmL6JPu9DSSyb/bmtjnvQ02QU/97vpi5vroC+g:8znLWom6JP7SI4/697B809g

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  bb05b1d633ac1e735eba4cae96594c00c1d5054b7e37408db9286c7ce1e396af
- Size
  
  56KB
- MD5
  
  6418f1a687d988c4c931e2a6336cd9d2
- SHA1
  
  0cfe153d379bebf61315b310fff9c6390aa03abb
- SHA256
  
  bb05b1d633ac1e735eba4cae96594c00c1d5054b7e37408db9286c7ce1e396af
- SHA512
  
  a35e4c77536485fbd67d26cb8122c5a75a731841808a275fbf50c4d3fe5719ccb2488dd01961bf1eb4814495b89ca666a385e1be16c1e374499f745ef654148e
- SSDEEP
  
  768:SvznLWXwCYmL6JPu9DSSyb/bmtjnvQ02QU/97vpi5vroC+g:8znLWom6JP7SI4/697B809g
Score

7^/10

spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Reads local data of messenger clients
  Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2