b88d2e637d74c4c2a0fc103a8972adb5a937e3d5f00bdff914e2cf627d74bef4 | Triage

Sharing

General

Target

b88d2e637d74c4c2a0fc103a8972adb5a937e3d5f00bdff914e2cf627d74bef4
Size

433KB
Sample

221216-d3y1wsea67
MD5

1f9f631dd0465684b40f6d5f83e6489c
SHA1

358dd2275b690faf036e636af7748f06cefb9199
SHA256

b88d2e637d74c4c2a0fc103a8972adb5a937e3d5f00bdff914e2cf627d74bef4
SHA512

1e299027c2bc4ba5e0e7cd421c634e11940417f8fd7b98db7ecd3c7146c0d9e9ce2462c899de0b98ada02a8616f7f74b4150d4092c92e118617944a1985db9da
SSDEEP

12288:BytTdAnSN3lKwBLsfG/9uYxnzpQ6ijqF:B6dQSN8qYO1uMzK6Z

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  b88d2e637d74c4c2a0fc103a8972adb5a937e3d5f00bdff914e2cf627d74bef4
- Size
  
  433KB
- MD5
  
  1f9f631dd0465684b40f6d5f83e6489c
- SHA1
  
  358dd2275b690faf036e636af7748f06cefb9199
- SHA256
  
  b88d2e637d74c4c2a0fc103a8972adb5a937e3d5f00bdff914e2cf627d74bef4
- SHA512
  
  1e299027c2bc4ba5e0e7cd421c634e11940417f8fd7b98db7ecd3c7146c0d9e9ce2462c899de0b98ada02a8616f7f74b4150d4092c92e118617944a1985db9da
- SSDEEP
  
  12288:BytTdAnSN3lKwBLsfG/9uYxnzpQ6ijqF:B6dQSN8qYO1uMzK6Z
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer