daca1dc93d27b027aef623dc8d8617bde10377e8801efb19db2766082d7a8a2f | Triage

Analysis

max time kernel
26s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
20-03-2023 15:37

Sharing

Report Analysis Logs

General

Target

Loader_Planner_5D.exe
Size

700.0MB
MD5

7a7659ff3e74bc35460e286a958c3c6e
SHA1

38e582ec32035ad66d8cbc73fea26e644427f4c3
SHA256

daca1dc93d27b027aef623dc8d8617bde10377e8801efb19db2766082d7a8a2f
SHA512

014f7f444a3566dff715172bdb4e41181be3a03bbc7b97bda5b03c24c052652bcc32962c9f355268875225f5367376c8a74fffc4d729cc52bbd9e2dd57d88269
SSDEEP

12288:EpA5axgZRCgYcxX1y86okHbSQTX3PpA5axgZRCgYcxX1y86okHbSQToJA:EW5ZrYcx56JuQbfW5ZrYcx56JuQ0JA

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081

C:\Users\Admin\AppData\Local\Temp\Loader_Planner_5D.exe
"C:\Users\Admin\AppData\Local\Temp\Loader_Planner_5D.exe"
1⤵
PID:1224

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads