d8515a1f41f445bd1aef461aa762f82f98832ae9948f7f7b63f0656e9b8fb16e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8515a1f41f445bd1aef461aa762f82f98832ae9948f7f7b63f0656e9b8fb16e
Size

119KB
Sample

221206-vcpszahg4y
MD5

5ffcf75b8964de0882bc8e04f4b8c7dd
SHA1

2c8c6c00559574d73b31c4979b0901dc73d745ed
SHA256

d8515a1f41f445bd1aef461aa762f82f98832ae9948f7f7b63f0656e9b8fb16e
SHA512

e6254cabb658b2f3b027b616303f9ae14073cf41b0c2a1c5937a748b2b6128acda04384930e4b6b464e875a35c3610e4f2a3b55e7fce86dbfe59b1428b3be7ba
SSDEEP

1536:vs2uA+sbIxabXdirWka51vNc+FvOSSdigYLau9S4A6lmT:v/hVir6rvN7xdS/rV5T

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  d8515a1f41f445bd1aef461aa762f82f98832ae9948f7f7b63f0656e9b8fb16e
- Size
  
  119KB
- MD5
  
  5ffcf75b8964de0882bc8e04f4b8c7dd
- SHA1
  
  2c8c6c00559574d73b31c4979b0901dc73d745ed
- SHA256
  
  d8515a1f41f445bd1aef461aa762f82f98832ae9948f7f7b63f0656e9b8fb16e
- SHA512
  
  e6254cabb658b2f3b027b616303f9ae14073cf41b0c2a1c5937a748b2b6128acda04384930e4b6b464e875a35c3610e4f2a3b55e7fce86dbfe59b1428b3be7ba
- SSDEEP
  
  1536:vs2uA+sbIxabXdirWka51vNc+FvOSSdigYLau9S4A6lmT:v/hVir6rvN7xdS/rV5T
Score

7^/10

discovery spyware stealer
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2