b00f33b5650bb630215603647144738f338270bfdfacafd15adf1d7a86f65392 | Triage

Sharing

General

Target

b00f33b5650bb630215603647144738f338270bfdfacafd15adf1d7a86f65392
Size

400KB
Sample

230110-l4jatsff48
MD5

4c93483023003b82a8b639f728038e30
SHA1

1b4f31a16927b5e0243fa658745a265799374623
SHA256

b00f33b5650bb630215603647144738f338270bfdfacafd15adf1d7a86f65392
SHA512

c488dfeb9dcf5c12b0ae964745d19bd356558a5d9532c1d8759b6a7e00d9166a038fa144fcf736cc812ea77e4f3cba535647b6d6e29df5d8bc1703a879bd9f03
SSDEEP

6144:9/oLiplpjjk3o/8Ggldw8nWSTo4/UFvEMvNTQX3FTtKk3bS842Fu7r/:9/oYlpjgY2ldPWSTo4/UFjvmf3bdtFg

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  b00f33b5650bb630215603647144738f338270bfdfacafd15adf1d7a86f65392
- Size
  
  400KB
- MD5
  
  4c93483023003b82a8b639f728038e30
- SHA1
  
  1b4f31a16927b5e0243fa658745a265799374623
- SHA256
  
  b00f33b5650bb630215603647144738f338270bfdfacafd15adf1d7a86f65392
- SHA512
  
  c488dfeb9dcf5c12b0ae964745d19bd356558a5d9532c1d8759b6a7e00d9166a038fa144fcf736cc812ea77e4f3cba535647b6d6e29df5d8bc1703a879bd9f03
- SSDEEP
  
  6144:9/oLiplpjjk3o/8Ggldw8nWSTo4/UFvEMvNTQX3FTtKk3bS842Fu7r/:9/oYlpjgY2ldPWSTo4/UFjvmf3bdtFg
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer