7af994c3a375025de38e3b2bc62db5d4e2cc6a2e7e5b163482218281d0239f7b | Triage

Sharing

General

Target

7af994c3a375025de38e3b2bc62db5d4e2cc6a2e7e5b163482218281d0239f7b
Size

379KB
Sample

230105-bnrxxsad74
MD5

20653bebce54161a38b1f7fcc68d2e2f
SHA1

cef22c99066ef7bfd899656c7d17cd2bc2aacdd9
SHA256

7af994c3a375025de38e3b2bc62db5d4e2cc6a2e7e5b163482218281d0239f7b
SHA512

48b0bdbc7bc5f6196adec5f5310a720f9f530e29e8da031999d07a9a695b649506613145a42ce5068cc6de965c22ccb80cc8014995b0ff2ecad96fa75bb12a7f
SSDEEP

3072:ckX/+vRqLTr9VTe2H5ThFu1hGJY4Bmd9n9ekhqZPB6MY8jdA4upFldiLLk1caw/p:hnLTne2zFuv4BqpwzPGoxupmLicBpjT

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  7af994c3a375025de38e3b2bc62db5d4e2cc6a2e7e5b163482218281d0239f7b
- Size
  
  379KB
- MD5
  
  20653bebce54161a38b1f7fcc68d2e2f
- SHA1
  
  cef22c99066ef7bfd899656c7d17cd2bc2aacdd9
- SHA256
  
  7af994c3a375025de38e3b2bc62db5d4e2cc6a2e7e5b163482218281d0239f7b
- SHA512
  
  48b0bdbc7bc5f6196adec5f5310a720f9f530e29e8da031999d07a9a695b649506613145a42ce5068cc6de965c22ccb80cc8014995b0ff2ecad96fa75bb12a7f
- SSDEEP
  
  3072:ckX/+vRqLTr9VTe2H5ThFu1hGJY4Bmd9n9ekhqZPB6MY8jdA4upFldiLLk1caw/p:hnLTne2zFuv4BqpwzPGoxupmLicBpjT
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1