ba71e5fe297e50c9d6584c83aa5cc1d64a6c647ba42f9f9024039152d258749a | Triage

Resubmissions

30-01-2023 13:11

230130-qfbnascb7x 10

12-01-2023 16:21

230112-ttnrkagf73 7

Sharing

General

Target

031d7bccaf5900a9b6d90f9edaacddd1.exe
Size

306KB
Sample

230112-ttnrkagf73
MD5

031d7bccaf5900a9b6d90f9edaacddd1
SHA1

bb7667b055fbefff7dd85d508a7c08b011c59795
SHA256

ba71e5fe297e50c9d6584c83aa5cc1d64a6c647ba42f9f9024039152d258749a
SHA512

eb367337b082bdfed5a6b82d0802052263891139c5a57cbb06dbd9ec8169cf6b42aff600ef55d1547d9407bf897d8b6dc410ab242d2992e51e479dcf316ee42e
SSDEEP

3072:WKXEPgfgL8JWZf2Zf5EJeA62FqG96MvqONz8E9VF8zCWx3zTuPx76b5qWbyajt:9sLl2Zoe72UD08yVFIe5gq+

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  031d7bccaf5900a9b6d90f9edaacddd1.exe
- Size
  
  306KB
- MD5
  
  031d7bccaf5900a9b6d90f9edaacddd1
- SHA1
  
  bb7667b055fbefff7dd85d508a7c08b011c59795
- SHA256
  
  ba71e5fe297e50c9d6584c83aa5cc1d64a6c647ba42f9f9024039152d258749a
- SHA512
  
  eb367337b082bdfed5a6b82d0802052263891139c5a57cbb06dbd9ec8169cf6b42aff600ef55d1547d9407bf897d8b6dc410ab242d2992e51e479dcf316ee42e
- SSDEEP
  
  3072:WKXEPgfgL8JWZf2Zf5EJeA62FqG96MvqONz8E9VF8zCWx3zTuPx76b5qWbyajt:9sLl2Zoe72UD08yVFIe5gq+
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2