b96b11a4318b4a3e485e641485b7c64e6b252e65d28fe605644a720b5d6625d0 | Triage

Sharing

General

Target

b96b11a4318b4a3e485e641485b7c64e6b252e65d28fe605644a720b5d6625d0
Size

264KB
Sample

221205-t7qs3sbf2t
MD5

c7d49ddd1f0a6aa4fbf0a8dfd94c1eff
SHA1

740c517bfcc7fe6f5a216b5100f047c8e4c6f107
SHA256

b96b11a4318b4a3e485e641485b7c64e6b252e65d28fe605644a720b5d6625d0
SHA512

41a65af04607efcfd09e0648458c8421bf4058b118809ed84bdfcefc1d624fd045d3671e56a782d62045b52b14d39cdbf0771732a3058e32d25da9339589ea2a
SSDEEP

6144:U3BAmnb7w1QJNxHcoI03y6GqzGWAjZdCO3wBYuFv31kkTcW:EBAeMKbx9ty6Gq6J1s0uRoW

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  b96b11a4318b4a3e485e641485b7c64e6b252e65d28fe605644a720b5d6625d0
- Size
  
  264KB
- MD5
  
  c7d49ddd1f0a6aa4fbf0a8dfd94c1eff
- SHA1
  
  740c517bfcc7fe6f5a216b5100f047c8e4c6f107
- SHA256
  
  b96b11a4318b4a3e485e641485b7c64e6b252e65d28fe605644a720b5d6625d0
- SHA512
  
  41a65af04607efcfd09e0648458c8421bf4058b118809ed84bdfcefc1d624fd045d3671e56a782d62045b52b14d39cdbf0771732a3058e32d25da9339589ea2a
- SSDEEP
  
  6144:U3BAmnb7w1QJNxHcoI03y6GqzGWAjZdCO3wBYuFv31kkTcW:EBAeMKbx9ty6Gq6J1s0uRoW
Score

7^/10

persistence spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer