2037fe9bda91d9d038806dd8cc4d7cab4649a33cd5d3778c54f2a3099e61cf7f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2037fe9bda91d9d038806dd8cc4d7cab4649a33cd5d3778c54f2a3099e61cf7f
Size

365KB
Sample

230106-czrlzahf4z
MD5

b04d469ba01fa01aba0bb880fdc039c0
SHA1

48c2cab5897afdee2261bfcbdb48224e1fb463da
SHA256

2037fe9bda91d9d038806dd8cc4d7cab4649a33cd5d3778c54f2a3099e61cf7f
SHA512

9a3b19d87e46f825ee631b4c2bf2f40ad3aea61025090413a448dfeffea7822ebcda3baa8363aa463a81dc4cb0d530218d675960ce6b6881a4dd0ea0c95cc664
SSDEEP

6144:p5GzLoZBRm+pKADNeig/UVgZjM35TwJbn425G4+OG9sjYcO6:DQcZBRm+I+MfhZj2Zwdn4HlCxV

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  2037fe9bda91d9d038806dd8cc4d7cab4649a33cd5d3778c54f2a3099e61cf7f
- Size
  
  365KB
- MD5
  
  b04d469ba01fa01aba0bb880fdc039c0
- SHA1
  
  48c2cab5897afdee2261bfcbdb48224e1fb463da
- SHA256
  
  2037fe9bda91d9d038806dd8cc4d7cab4649a33cd5d3778c54f2a3099e61cf7f
- SHA512
  
  9a3b19d87e46f825ee631b4c2bf2f40ad3aea61025090413a448dfeffea7822ebcda3baa8363aa463a81dc4cb0d530218d675960ce6b6881a4dd0ea0c95cc664
- SSDEEP
  
  6144:p5GzLoZBRm+pKADNeig/UVgZjM35TwJbn425G4+OG9sjYcO6:DQcZBRm+I+MfhZj2Zwdn4HlCxV
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer