847e253f107811d287f3d69a5e8b6789a3658fbad6a4adf353bead12d80e0dd4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5636145ced6e73f725835d37f75395017a69a860236a01195dc4b11bdc2be021.zip
Size

536KB
Sample

230308-pv8qxage39
MD5

808cb915502504b53f826a400f189586
SHA1

9684fb2c6d038d1e180416df63f40c752ebdf04c
SHA256

847e253f107811d287f3d69a5e8b6789a3658fbad6a4adf353bead12d80e0dd4
SHA512

feb0b3dbb23a0adddf090c43cb8f9257067f23717faa2bef4deb2d7f448a0ee3a91e415576f51b2bf8f3fcc0af46a4206e8ac649085d1f74da3deb3d554621f1
SSDEEP

12288:lRcJDIJO7007rKzV8JiZxVEFAtPIeTu8Ie8AciPyFGynOfQv:z4Dn70wrK1autPVFI4ckygnq

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  5636145ced6e73f725835d37f75395017a69a860236a01195dc4b11bdc2be021.exe
- Size
  
  1.0MB
- MD5
  
  2cf7028f2e221b5c48ce27381282d7ae
- SHA1
  
  b24556b48cc4cf9641448d87d9c1ee7f9af86c5a
- SHA256
  
  5636145ced6e73f725835d37f75395017a69a860236a01195dc4b11bdc2be021
- SHA512
  
  84772a961ab244bedc49bcf6825971a24969fbe3a45f0f6e3d26aaba8db400368637f3d80270a117891dc6df127e3f75763079aa8635ff47bbc24fe67ea22bb3
- SSDEEP
  
  24576:JMq/RX0hoa8wrC+azFbtZhUYFauTZyRMlH:Jioa8wrCHz3ZhUYRAuH
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2