9002e280cfdf265a9f7b4c24c6ddbb51e968e5f2d1ff0f8253f20adccfcde1df | Triage

Sharing

General

Target

9002e280cfdf265a9f7b4c24c6ddbb51e968e5f2d1ff0f8253f20adccfcde1df
Size

280KB
Sample

221205-pvz4rsed3s
MD5

ae11554480e3415a6352e5812732bf14
SHA1

6f9efafca5125130300861c195dd5455c1b013d8
SHA256

9002e280cfdf265a9f7b4c24c6ddbb51e968e5f2d1ff0f8253f20adccfcde1df
SHA512

0b41eaf45f1e75c8650166c12bfc88a76b4a9afad2eb54115c568a3902e0007d6d1c85754008b2f26b2b069ac412938158f390fc878aa6285f552443b17ff434
SSDEEP

6144:8YTlOUF0PqlaRWTEvY9SGRzDBqFk7Dav83nCkmJtyQ49phRv5OWZco7o:x5NFaqlaRbcRsvsCkAthdWZQ

Score

7^/10

collection discovery spyware stealer

Malware Config

Targets

- Target
  
  9002e280cfdf265a9f7b4c24c6ddbb51e968e5f2d1ff0f8253f20adccfcde1df
- Size
  
  280KB
- MD5
  
  ae11554480e3415a6352e5812732bf14
- SHA1
  
  6f9efafca5125130300861c195dd5455c1b013d8
- SHA256
  
  9002e280cfdf265a9f7b4c24c6ddbb51e968e5f2d1ff0f8253f20adccfcde1df
- SHA512
  
  0b41eaf45f1e75c8650166c12bfc88a76b4a9afad2eb54115c568a3902e0007d6d1c85754008b2f26b2b069ac412938158f390fc878aa6285f552443b17ff434
- SSDEEP
  
  6144:8YTlOUF0PqlaRWTEvY9SGRzDBqFk7Dav83nCkmJtyQ49phRv5OWZco7o:x5NFaqlaRbcRsvsCkAthdWZQ
Score

7^/10

collection discovery spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectiondiscoveryspywarestealer

behavioral2

collectiondiscoveryspywarestealer