c7f6ca85876a416debb5494c6cb9a5efcb865c7b0cd04030ce31a22ce78c42a0 | Triage

Sharing

General

Target

c7f6ca85876a416debb5494c6cb9a5efcb865c7b0cd04030ce31a22ce78c42a0
Size

306KB
Sample

230207-sm4nrsfe6z
MD5

df982949b8c074fef5ef37b5dc4dc4d3
SHA1

e8b0c5d81501e1306765ac30148b8b5bb58ea9f6
SHA256

c7f6ca85876a416debb5494c6cb9a5efcb865c7b0cd04030ce31a22ce78c42a0
SHA512

1655500e31ceb1f265f9a681f70abbc47debaa70e05c850b41cba37057fe5e110226f200fe1026c41567c4e2e80c5b7397666339142749f457be1446e3a5760b
SSDEEP

6144:zeK2RKL4epZUfnBESH/hgSjGF+E9iROWoyWF/NFnR:zeK2RKsez6BB6VP9i8Woys/NFR

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c7f6ca85876a416debb5494c6cb9a5efcb865c7b0cd04030ce31a22ce78c42a0
- Size
  
  306KB
- MD5
  
  df982949b8c074fef5ef37b5dc4dc4d3
- SHA1
  
  e8b0c5d81501e1306765ac30148b8b5bb58ea9f6
- SHA256
  
  c7f6ca85876a416debb5494c6cb9a5efcb865c7b0cd04030ce31a22ce78c42a0
- SHA512
  
  1655500e31ceb1f265f9a681f70abbc47debaa70e05c850b41cba37057fe5e110226f200fe1026c41567c4e2e80c5b7397666339142749f457be1446e3a5760b
- SSDEEP
  
  6144:zeK2RKL4epZUfnBESH/hgSjGF+E9iROWoyWF/NFnR:zeK2RKsez6BB6VP9i8Woys/NFR
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer