36078545b33185bb63d197db8b6411bf460dac15afcb62b8c7081fa3ffd5d845 | Triage

Sharing

General

Target

36078545b33185bb63d197db8b6411bf460dac15afcb62b8c7081fa3ffd5d845
Size

398KB
Sample

221227-nmangaaa5w
MD5

03781660d232c5f47f4d1502d5fdb7f7
SHA1

4aca049c790e43977c5122b7c5cea2b64959494e
SHA256

36078545b33185bb63d197db8b6411bf460dac15afcb62b8c7081fa3ffd5d845
SHA512

cb1683ccf8e774294319cf9e3b89ed78edf3c9e9b179e3edde5168315e1f75e4cfe756ab81820191c355c15df2ffff6d9e53b9bf4d7174076a37357a68938290
SSDEEP

12288:RfRIZxYgzxxx9mw2eDYRKA58xaxDPyrbA:RS5Vgw2hRK68xaNPyrc

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  36078545b33185bb63d197db8b6411bf460dac15afcb62b8c7081fa3ffd5d845
- Size
  
  398KB
- MD5
  
  03781660d232c5f47f4d1502d5fdb7f7
- SHA1
  
  4aca049c790e43977c5122b7c5cea2b64959494e
- SHA256
  
  36078545b33185bb63d197db8b6411bf460dac15afcb62b8c7081fa3ffd5d845
- SHA512
  
  cb1683ccf8e774294319cf9e3b89ed78edf3c9e9b179e3edde5168315e1f75e4cfe756ab81820191c355c15df2ffff6d9e53b9bf4d7174076a37357a68938290
- SSDEEP
  
  12288:RfRIZxYgzxxx9mw2eDYRKA58xaxDPyrbA:RS5Vgw2hRK68xaNPyrc
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer