6b8e508639fb155ae0310e35c9359562b8c76994a62440d468fc272fa1d63747 | Triage

Sharing

General

Target

6b8e508639fb155ae0310e35c9359562b8c76994a62440d468fc272fa1d63747
Size

334KB
Sample

221217-x3gamacb41
MD5

f951b1f6479332b5d9e67f2ac830fa9f
SHA1

c0d2f83c2b247e2665850a8ca1c0653d25b73f32
SHA256

6b8e508639fb155ae0310e35c9359562b8c76994a62440d468fc272fa1d63747
SHA512

eaeb2a31f2072f39145a4071c22e63f9c32b29ca35127ddefea048b7f0e49720338ed3d806111053f8ba055b16abd713bff0958514314ea843fcce601e51784c
SSDEEP

6144:eNm4oLmhQGaQF5SjjngaeeamuzIRecsa1b39xlGeTg3C7fU0V6:EmttzgNeamJRzsa1btUSwO

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  6b8e508639fb155ae0310e35c9359562b8c76994a62440d468fc272fa1d63747
- Size
  
  334KB
- MD5
  
  f951b1f6479332b5d9e67f2ac830fa9f
- SHA1
  
  c0d2f83c2b247e2665850a8ca1c0653d25b73f32
- SHA256
  
  6b8e508639fb155ae0310e35c9359562b8c76994a62440d468fc272fa1d63747
- SHA512
  
  eaeb2a31f2072f39145a4071c22e63f9c32b29ca35127ddefea048b7f0e49720338ed3d806111053f8ba055b16abd713bff0958514314ea843fcce601e51784c
- SSDEEP
  
  6144:eNm4oLmhQGaQF5SjjngaeeamuzIRecsa1b39xlGeTg3C7fU0V6:EmttzgNeamJRzsa1btUSwO
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer