1d7c318cdee757f4d88035c68f0124046148bab31a02c7cda56d8f478bf54ee4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d7c318cdee757f4d88035c68f0124046148bab31a02c7cda56d8f478bf54ee4
Size

383KB
Sample

221225-sd7n3aeg6t
MD5

4029a94cc0080979ee5e9278ed182a0c
SHA1

4246c2269f5a98ffe2ab70cf3b9e9217ed55fd5b
SHA256

1d7c318cdee757f4d88035c68f0124046148bab31a02c7cda56d8f478bf54ee4
SHA512

0c6b315667aa2d47cdba231cd292cbb070041088bcea44b73c0329d0e720f2d4ce9e32baa135f86e79fdadae578447f06d01c20153404410edbe64a167087356
SSDEEP

6144:nsLDIKXM6RwYh4geLd3L6LeT3ZkCgEmPoNWd2VJB9rQSY9fNYwcLC5J/3CPGymI:snIFEIJuLeT3qCgTq9HrQSI8O5V3am

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  1d7c318cdee757f4d88035c68f0124046148bab31a02c7cda56d8f478bf54ee4
- Size
  
  383KB
- MD5
  
  4029a94cc0080979ee5e9278ed182a0c
- SHA1
  
  4246c2269f5a98ffe2ab70cf3b9e9217ed55fd5b
- SHA256
  
  1d7c318cdee757f4d88035c68f0124046148bab31a02c7cda56d8f478bf54ee4
- SHA512
  
  0c6b315667aa2d47cdba231cd292cbb070041088bcea44b73c0329d0e720f2d4ce9e32baa135f86e79fdadae578447f06d01c20153404410edbe64a167087356
- SSDEEP
  
  6144:nsLDIKXM6RwYh4geLd3L6LeT3ZkCgEmPoNWd2VJB9rQSY9fNYwcLC5J/3CPGymI:snIFEIJuLeT3qCgTq9HrQSI8O5V3am
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer