f341d4321a45a7e65d27658d1fc197aca8bb6eeff13f0142726472970ea44d32 | Triage

Resubmissions

26-12-2022 00:14

221226-ajqcvscc83 7

25-12-2022 22:20

221225-19d1mafd3v 7

Sharing

General

Target

f341d4321a45a7e65d27658d1fc197aca8bb6eeff13f0142726472970ea44d32
Size

643KB
Sample

221226-ajqcvscc83
MD5

3f7e56e9f2e0371568840accc78adaa3
SHA1

4bcc71c7b6ce7d5a3b8d854001e9320bc20f646d
SHA256

f341d4321a45a7e65d27658d1fc197aca8bb6eeff13f0142726472970ea44d32
SHA512

110182314ce0a29f7422f09edae567791d81480e89e9e15811388f001d0e99ed2a34bd71da31bf6a77db4a7bccca154d5aa56a04ea3fb52a036f94db8ee4126d
SSDEEP

12288:gIVVVFGVFYFGVFYFGVFed24WA2J5PfYRPBpFHkxGh:BVHIF0IF0IFedaJ53YR5HHkU

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  f341d4321a45a7e65d27658d1fc197aca8bb6eeff13f0142726472970ea44d32
- Size
  
  643KB
- MD5
  
  3f7e56e9f2e0371568840accc78adaa3
- SHA1
  
  4bcc71c7b6ce7d5a3b8d854001e9320bc20f646d
- SHA256
  
  f341d4321a45a7e65d27658d1fc197aca8bb6eeff13f0142726472970ea44d32
- SHA512
  
  110182314ce0a29f7422f09edae567791d81480e89e9e15811388f001d0e99ed2a34bd71da31bf6a77db4a7bccca154d5aa56a04ea3fb52a036f94db8ee4126d
- SSDEEP
  
  12288:gIVVVFGVFYFGVFYFGVFed24WA2J5PfYRPBpFHkxGh:BVHIF0IF0IFedaJ53YR5HHkU
Score

7^/10

spyware stealer
- Loads dropped DLL
- Accesses 2FA software files, possible credential harvesting
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2