9c999362401d8524d3d1e738bcb240509b4f3c7d02b80df677fd5268f458c8cc | Triage

Sharing

General

Target

9c999362401d8524d3d1e738bcb240509b4f3c7d02b80df677fd5268f458c8cc
Size

416KB
Sample

230108-ryencadg92
MD5

b18acc3278687cac6f18760f75a06773
SHA1

c74a5862e2412cef9fafbdce151c442cdd2aeb75
SHA256

9c999362401d8524d3d1e738bcb240509b4f3c7d02b80df677fd5268f458c8cc
SHA512

03263291671bea2ff144a6a1ccf10caebc1d160123a8e8b63402fd20e42217470391d50093504915c0ea673cea7d25b528499015795affdb43b54789e228ca43
SSDEEP

6144:i9L//xuUwm6Zth/fHYe0Dzq8t+LynIdBgKSJ2Z0IuAnHOuN:i97/xuUOvHHYeOznfnWhXHJ

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  9c999362401d8524d3d1e738bcb240509b4f3c7d02b80df677fd5268f458c8cc
- Size
  
  416KB
- MD5
  
  b18acc3278687cac6f18760f75a06773
- SHA1
  
  c74a5862e2412cef9fafbdce151c442cdd2aeb75
- SHA256
  
  9c999362401d8524d3d1e738bcb240509b4f3c7d02b80df677fd5268f458c8cc
- SHA512
  
  03263291671bea2ff144a6a1ccf10caebc1d160123a8e8b63402fd20e42217470391d50093504915c0ea673cea7d25b528499015795affdb43b54789e228ca43
- SSDEEP
  
  6144:i9L//xuUwm6Zth/fHYe0Dzq8t+LynIdBgKSJ2Z0IuAnHOuN:i97/xuUOvHHYeOznfnWhXHJ
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer