e65e1432b5b1d09d9314276b3cabd515fe2cba2516251f5379bc10b77cdaee30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e65e1432b5b1d09d9314276b3cabd515fe2cba2516251f5379bc10b77cdaee30
Size

334KB
Sample

221218-s3aevsfe3z
MD5

7cac24c7ec05952c47fe380bfa55f7f5
SHA1

22187aab75d669a00470024939666b6ae9ea8c51
SHA256

e65e1432b5b1d09d9314276b3cabd515fe2cba2516251f5379bc10b77cdaee30
SHA512

cde1653c12046b75722771c284cbd365a75fcae88695643caf9dc7f006e6a3aa80ebea39d022de44b543bfd94539334bc87b56d34dab3382aeb432dd8c6de77d
SSDEEP

6144:gvKL2RfudvMNUEb+ctR8sHOYB0nnz5QgyPdQs0cxs+KRsUgNDjlVklPH:aKSwShksuDnzm1esxCDRgNPlU

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  e65e1432b5b1d09d9314276b3cabd515fe2cba2516251f5379bc10b77cdaee30
- Size
  
  334KB
- MD5
  
  7cac24c7ec05952c47fe380bfa55f7f5
- SHA1
  
  22187aab75d669a00470024939666b6ae9ea8c51
- SHA256
  
  e65e1432b5b1d09d9314276b3cabd515fe2cba2516251f5379bc10b77cdaee30
- SHA512
  
  cde1653c12046b75722771c284cbd365a75fcae88695643caf9dc7f006e6a3aa80ebea39d022de44b543bfd94539334bc87b56d34dab3382aeb432dd8c6de77d
- SSDEEP
  
  6144:gvKL2RfudvMNUEb+ctR8sHOYB0nnz5QgyPdQs0cxs+KRsUgNDjlVklPH:aKSwShksuDnzm1esxCDRgNPlU
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer