340dbba6ce4f7994a16419141fd85e03d628654df78a7dd2ad179a231e7681e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

340dbba6ce4f7994a16419141fd85e03d628654df78a7dd2ad179a231e7681e5
Size

359KB
Sample

230101-29fpwsgb3y
MD5

7665a8b076a526ca50a32cb21adbb622
SHA1

d968936a3f090da63ebe98bc67c1d29fe5d6a9ba
SHA256

340dbba6ce4f7994a16419141fd85e03d628654df78a7dd2ad179a231e7681e5
SHA512

008bb326b966dff01ac15efa132b84feee01773b7e480d165bc497718a5f2263943a3ebf3aaece8c4b55ccf8459285cdfc2027ddde70ff4f2ece0f8ade984b6e
SSDEEP

6144:zaLb1dyls7QIwZ9HJmvKUqKB2QMjzvAGGDV4b7i:zaf1To9HcvKUJqzvAn4bu

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  340dbba6ce4f7994a16419141fd85e03d628654df78a7dd2ad179a231e7681e5
- Size
  
  359KB
- MD5
  
  7665a8b076a526ca50a32cb21adbb622
- SHA1
  
  d968936a3f090da63ebe98bc67c1d29fe5d6a9ba
- SHA256
  
  340dbba6ce4f7994a16419141fd85e03d628654df78a7dd2ad179a231e7681e5
- SHA512
  
  008bb326b966dff01ac15efa132b84feee01773b7e480d165bc497718a5f2263943a3ebf3aaece8c4b55ccf8459285cdfc2027ddde70ff4f2ece0f8ade984b6e
- SSDEEP
  
  6144:zaLb1dyls7QIwZ9HJmvKUqKB2QMjzvAGGDV4b7i:zaf1To9HcvKUJqzvAn4bu
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer