a7bbd16dc1c0c8da3766f5ba6282e0786f568485c6df8e66e91930ab8cc35d09 | Triage

Sharing

General

Target

a7bbd16dc1c0c8da3766f5ba6282e0786f568485c6df8e66e91930ab8cc35d09
Size

459KB
Sample

221229-mlkavach29
MD5

9ea396764d2a9737444ce6fb42cd2101
SHA1

d72c0bdbbbcbd6cbfbf6d0d54ab4a2b0b654d40e
SHA256

a7bbd16dc1c0c8da3766f5ba6282e0786f568485c6df8e66e91930ab8cc35d09
SHA512

2282da2d25ef71f784d1905253e277463d9ee7973b3c49c985ae6b67bc9f99010841e6ff2e4873945d0b0922923852f2f97273a10f5a6aa83e9502520c5e6b00
SSDEEP

6144:AUk2LymVltNyAz5nDuweg6wE4+zXFHVOa4DREjfYf67k13bwZ4Vxq:rL2mVsm5nDujyGVTjfYy7

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  a7bbd16dc1c0c8da3766f5ba6282e0786f568485c6df8e66e91930ab8cc35d09
- Size
  
  459KB
- MD5
  
  9ea396764d2a9737444ce6fb42cd2101
- SHA1
  
  d72c0bdbbbcbd6cbfbf6d0d54ab4a2b0b654d40e
- SHA256
  
  a7bbd16dc1c0c8da3766f5ba6282e0786f568485c6df8e66e91930ab8cc35d09
- SHA512
  
  2282da2d25ef71f784d1905253e277463d9ee7973b3c49c985ae6b67bc9f99010841e6ff2e4873945d0b0922923852f2f97273a10f5a6aa83e9502520c5e6b00
- SSDEEP
  
  6144:AUk2LymVltNyAz5nDuweg6wE4+zXFHVOa4DREjfYf67k13bwZ4Vxq:rL2mVsm5nDujyGVTjfYy7
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer