94f79307cf406166058b66af4ef21d3eb58051b1d1dd0ec793e5406fc59fb7e8 | Triage

Sharing

General

Target

SecuriteInfo.com.IL.Trojan.MSILZilla.25609.10697.2823.exe
Size

37KB
Sample

230411-npfmhadg8v
MD5

4f0402bf30445ece92c85cd3ee8240ac
SHA1

26d327332540b1bbe091db0f7e2345a1295ae271
SHA256

94f79307cf406166058b66af4ef21d3eb58051b1d1dd0ec793e5406fc59fb7e8
SHA512

a43cee4c53bc87d1507455b00350b5fcf0ccf64bf0a615b1215e163cd0899eace9906f80d61583ef65fa38669bbf93f5af71948080abe8047cab5950d5914396
SSDEEP

768:qz5oDHOiKsJOqee51+SJ5K1BbDUZLxilVHSc0m/pWtHWpHWXBZlLBB1DezPmE/nz:qz5ziKsJOqeov4bDQOxQbeRz

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  SecuriteInfo.com.IL.Trojan.MSILZilla.25609.10697.2823.exe
- Size
  
  37KB
- MD5
  
  4f0402bf30445ece92c85cd3ee8240ac
- SHA1
  
  26d327332540b1bbe091db0f7e2345a1295ae271
- SHA256
  
  94f79307cf406166058b66af4ef21d3eb58051b1d1dd0ec793e5406fc59fb7e8
- SHA512
  
  a43cee4c53bc87d1507455b00350b5fcf0ccf64bf0a615b1215e163cd0899eace9906f80d61583ef65fa38669bbf93f5af71948080abe8047cab5950d5914396
- SSDEEP
  
  768:qz5oDHOiKsJOqee51+SJ5K1BbDUZLxilVHSc0m/pWtHWpHWXBZlLBB1DezPmE/nz:qz5ziKsJOqeov4bDQOxQbeRz
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2