c8218bf24481946447bb48a34e7828e4a1d8b3226c4b70da1a528353c4847f27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8218bf24481946447bb48a34e7828e4a1d8b3226c4b70da1a528353c4847f27
Size

465KB
Sample

230104-xbb7lahb69
MD5

a69a5a739f8faa050fa439dfcf485b8e
SHA1

c91bef2bc1ac1da7850e0ce4989145c130588650
SHA256

c8218bf24481946447bb48a34e7828e4a1d8b3226c4b70da1a528353c4847f27
SHA512

47d289bdd66b2afb4373716cb3faa654421b728d95b2098b1af0ddd14b7533ea2029b2bb8fce62fc7e4eac7366f3db6d8460df7cb5c6e7f217be0c7479626cdb
SSDEEP

6144:5ALO121tvMo0OXUdKpPkVXiyVZ0XoeaQ4xPZpHWpIaOdawoxupmLIH/KS0jT:5AC215V0dd0kVDMa6pIaOhoxupmL/S

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c8218bf24481946447bb48a34e7828e4a1d8b3226c4b70da1a528353c4847f27
- Size
  
  465KB
- MD5
  
  a69a5a739f8faa050fa439dfcf485b8e
- SHA1
  
  c91bef2bc1ac1da7850e0ce4989145c130588650
- SHA256
  
  c8218bf24481946447bb48a34e7828e4a1d8b3226c4b70da1a528353c4847f27
- SHA512
  
  47d289bdd66b2afb4373716cb3faa654421b728d95b2098b1af0ddd14b7533ea2029b2bb8fce62fc7e4eac7366f3db6d8460df7cb5c6e7f217be0c7479626cdb
- SSDEEP
  
  6144:5ALO121tvMo0OXUdKpPkVXiyVZ0XoeaQ4xPZpHWpIaOdawoxupmLIH/KS0jT:5AC215V0dd0kVDMa6pIaOhoxupmL/S
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer