32c50d56b921ad6e1b4f237ad432bcec2260c83113007007ea7448c97e8c90e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32c50d56b921ad6e1b4f237ad432bcec2260c83113007007ea7448c97e8c90e5
Size

338KB
Sample

221220-gswdssbh7w
MD5

2dbf657386bc5e478893fb560eba5ec5
SHA1

0360766145dfbc053925399d9c1edd141dca8d76
SHA256

32c50d56b921ad6e1b4f237ad432bcec2260c83113007007ea7448c97e8c90e5
SHA512

b2e28eb6bcffe223f12e819990e3b750efaacf6624def276e3e004c1602f29a5551c42091b361da7568558aee1c73ebafe15fce168581aa787c147aeacec4040
SSDEEP

6144:0b2XcLKFn+NziNHn3xpRATCYO/qSFVoisU+5jjPpXcAlZgOmX4Ca:0bWcuFn7vpR+hOqE1haPjDkm

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  32c50d56b921ad6e1b4f237ad432bcec2260c83113007007ea7448c97e8c90e5
- Size
  
  338KB
- MD5
  
  2dbf657386bc5e478893fb560eba5ec5
- SHA1
  
  0360766145dfbc053925399d9c1edd141dca8d76
- SHA256
  
  32c50d56b921ad6e1b4f237ad432bcec2260c83113007007ea7448c97e8c90e5
- SHA512
  
  b2e28eb6bcffe223f12e819990e3b750efaacf6624def276e3e004c1602f29a5551c42091b361da7568558aee1c73ebafe15fce168581aa787c147aeacec4040
- SSDEEP
  
  6144:0b2XcLKFn+NziNHn3xpRATCYO/qSFVoisU+5jjPpXcAlZgOmX4Ca:0bWcuFn7vpR+hOqE1haPjDkm
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer