ca7923921e087aa727393e68bbb67a403ad85045847ca15659d2c8dfbd98b645 | Triage

Sharing

General

Target

ca7923921e087aa727393e68bbb67a403ad85045847ca15659d2c8dfbd98b645
Size

40KB
Sample

221204-mwmhysbf98
MD5

e969aeb58bf616701a67c15b6f2dca01
SHA1

b236006f64778e40c878ff4c1ca2545ef8a3d1b0
SHA256

ca7923921e087aa727393e68bbb67a403ad85045847ca15659d2c8dfbd98b645
SHA512

d2473d7878847ba0cb2d209204af771a8ed8196b3301de423c03b73efe625088ae77ebc50a180628e829d49b9f030532871f7fffbcb55371b193c2a5f4507554
SSDEEP

768:167DkwqoXBc9p/oAScTBjPOXIgYGLOtaxIzzbG0HUUz8:c7RX67wA3jPOXINQOtaxIzu0HUUz8

Score

8^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  ca7923921e087aa727393e68bbb67a403ad85045847ca15659d2c8dfbd98b645
- Size
  
  40KB
- MD5
  
  e969aeb58bf616701a67c15b6f2dca01
- SHA1
  
  b236006f64778e40c878ff4c1ca2545ef8a3d1b0
- SHA256
  
  ca7923921e087aa727393e68bbb67a403ad85045847ca15659d2c8dfbd98b645
- SHA512
  
  d2473d7878847ba0cb2d209204af771a8ed8196b3301de423c03b73efe625088ae77ebc50a180628e829d49b9f030532871f7fffbcb55371b193c2a5f4507554
- SSDEEP
  
  768:167DkwqoXBc9p/oAScTBjPOXIgYGLOtaxIzzbG0HUUz8:c7RX67wA3jPOXINQOtaxIzu0HUUz8
Score

8^/10

persistence spyware stealer
- Adds policy Run key to start application
  persistence
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer