621606f23b6d2a7e300cc4785f35fe8235b60604fb2c988470bf8971b57360e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

621606f23b6d2a7e300cc4785f35fe8235b60604fb2c988470bf8971b57360e2
Size

304KB
Sample

230207-whj1cada55
MD5

fa90a0d3eda74437273dd23d8e9ca8e8
SHA1

6fcf6cfb3ce6daed7c13e9af899640c17b2e6b77
SHA256

621606f23b6d2a7e300cc4785f35fe8235b60604fb2c988470bf8971b57360e2
SHA512

76697009b21e0b06eba51989ab210e894e2a30fc32a701b19af0b226372ef09d2609ef3a360bfefdcc0131b449ae68d52ffd82bf7fab40b54882ea48be57912b
SSDEEP

6144:WryLl/t7LnStnj7AZYKoyjhrsu/bLwL6wvxlNlDrwTHlygs:WryhF7zSt3WoyjiuzLwL6GxlH3gHl

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  621606f23b6d2a7e300cc4785f35fe8235b60604fb2c988470bf8971b57360e2
- Size
  
  304KB
- MD5
  
  fa90a0d3eda74437273dd23d8e9ca8e8
- SHA1
  
  6fcf6cfb3ce6daed7c13e9af899640c17b2e6b77
- SHA256
  
  621606f23b6d2a7e300cc4785f35fe8235b60604fb2c988470bf8971b57360e2
- SHA512
  
  76697009b21e0b06eba51989ab210e894e2a30fc32a701b19af0b226372ef09d2609ef3a360bfefdcc0131b449ae68d52ffd82bf7fab40b54882ea48be57912b
- SSDEEP
  
  6144:WryLl/t7LnStnj7AZYKoyjhrsu/bLwL6wvxlNlDrwTHlygs:WryhF7zSt3WoyjiuzLwL6GxlH3gHl
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer