36919646f6c29a9422c53ab31e8299f92093e1c8169b063aeafd9023667a1536 | Triage

Sharing

General

Target

stealer.exe
Size

7.2MB
Sample

230413-lsz47sca2z
MD5

5c4750c9a5ed3e46da5475728bbcc4d4
SHA1

ea391857bc6ff1bc86767e28998da3d3b46e8711
SHA256

36919646f6c29a9422c53ab31e8299f92093e1c8169b063aeafd9023667a1536
SHA512

2e3b1bd5c468d23445e8a7e32a5d8de62e75649989d77a36dbd56894ce166eb5a85c8b62397abe442d2b9066ed296e523b33c5f3f25d35658cd3029d430bef1a
SSDEEP

196608:tjauUxbAQ5owejuJDUX47dwdW0LB6cYPZ1hzAx:axCaUX47d4b83

Score

7^/10

pyinstaller spyware stealer

Malware Config

Targets

- Target
  
  stealer.exe
- Size
  
  7.2MB
- MD5
  
  5c4750c9a5ed3e46da5475728bbcc4d4
- SHA1
  
  ea391857bc6ff1bc86767e28998da3d3b46e8711
- SHA256
  
  36919646f6c29a9422c53ab31e8299f92093e1c8169b063aeafd9023667a1536
- SHA512
  
  2e3b1bd5c468d23445e8a7e32a5d8de62e75649989d77a36dbd56894ce166eb5a85c8b62397abe442d2b9066ed296e523b33c5f3f25d35658cd3029d430bef1a
- SSDEEP
  
  196608:tjauUxbAQ5owejuJDUX47dwdW0LB6cYPZ1hzAx:axCaUX47d4b83
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Web Service

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2