aa5ff10af11af3b4af7c66031c4741010ad7a268be19beb65f9a1b969f198c77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa5ff10af11af3b4af7c66031c4741010ad7a268be19beb65f9a1b969f198c77
Size

429KB
Sample

221227-sxq6esac51
MD5

072bac2ffd5c16494634cfa862f8b1d8
SHA1

53114e52bb517867c4e556438a040276bdee4f26
SHA256

aa5ff10af11af3b4af7c66031c4741010ad7a268be19beb65f9a1b969f198c77
SHA512

4c7abc384eba0206f64f0a26a3cc8f7ef72f3f4e29d77fc192e713146689a642cbb5b7b64405e1e94b99c492d6a5895c02cf09d6b8ea8671a9c2955656377b9b
SSDEEP

6144:8aGLozIJXfri7OWjNz9Re5249UfSJV6HaGipVvG58xQ3xDPkMo5zXbAc:tG0sfmXe5N9Ufs7Gi3O58xaxDPyrbA

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  aa5ff10af11af3b4af7c66031c4741010ad7a268be19beb65f9a1b969f198c77
- Size
  
  429KB
- MD5
  
  072bac2ffd5c16494634cfa862f8b1d8
- SHA1
  
  53114e52bb517867c4e556438a040276bdee4f26
- SHA256
  
  aa5ff10af11af3b4af7c66031c4741010ad7a268be19beb65f9a1b969f198c77
- SHA512
  
  4c7abc384eba0206f64f0a26a3cc8f7ef72f3f4e29d77fc192e713146689a642cbb5b7b64405e1e94b99c492d6a5895c02cf09d6b8ea8671a9c2955656377b9b
- SSDEEP
  
  6144:8aGLozIJXfri7OWjNz9Re5249UfSJV6HaGipVvG58xQ3xDPkMo5zXbAc:tG0sfmXe5N9Ufs7Gi3O58xaxDPyrbA
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer