f14cd73974dc368f2502674200345c14e79be76a4773df0f493ff761a5a40ded | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f14cd73974dc368f2502674200345c14e79be76a4773df0f493ff761a5a40ded
Size

328KB
Sample

221206-yz6lsacg9x
MD5

abb35fbac1f5adfa64c92b0647b80b8a
SHA1

3341e17dbe41532f82e45013b7316396e88bb5b8
SHA256

f14cd73974dc368f2502674200345c14e79be76a4773df0f493ff761a5a40ded
SHA512

df4e2af096857e5895482a4a7b70f42d4c803922d9cca4f57afcc6142e9fcf0b418fded84e03e7300b9c6840e39f0526f93ea60af8d445b3952217f76f9abb1b
SSDEEP

1536:eiqtNbrCzMWziPkO8zCQrcS0zS3paXusK/Oyu/cdt:m/us8zPb0zStPEUt

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  f14cd73974dc368f2502674200345c14e79be76a4773df0f493ff761a5a40ded
- Size
  
  328KB
- MD5
  
  abb35fbac1f5adfa64c92b0647b80b8a
- SHA1
  
  3341e17dbe41532f82e45013b7316396e88bb5b8
- SHA256
  
  f14cd73974dc368f2502674200345c14e79be76a4773df0f493ff761a5a40ded
- SHA512
  
  df4e2af096857e5895482a4a7b70f42d4c803922d9cca4f57afcc6142e9fcf0b418fded84e03e7300b9c6840e39f0526f93ea60af8d445b3952217f76f9abb1b
- SSDEEP
  
  1536:eiqtNbrCzMWziPkO8zCQrcS0zS3paXusK/Oyu/cdt:m/us8zPb0zStPEUt
Score

7^/10

discovery spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer