abd6cb19839b66fe2198251724cc02bf48f227a92fff19648c992e4e5452443c | Triage

Sharing

General

Target

abd6cb19839b66fe2198251724cc02bf48f227a92fff19648c992e4e5452443c
Size

939KB
Sample

230418-vbhy2aee5y
MD5

b91bf8420d94dcc8a07a54a68930a48a
SHA1

81b2516999b9fa2d3cfa0229709f938378e3208e
SHA256

abd6cb19839b66fe2198251724cc02bf48f227a92fff19648c992e4e5452443c
SHA512

8f5bf26df1a8d74edcc7986643502d8a95f4e4d7e4c508ff98fc9291017716989ae2043eb809730315c0f1491c87c4e8679163894bb22780614bac8c08735f27
SSDEEP

24576:IyMH53k74N4qrAEyyWn3XwF5pGvWNKtl0oxv:PMH+qMEueevWotl0o

Score

10^/10

discovery evasion persistence spyware stealer trojan

Malware Config

Targets

- Target
  
  abd6cb19839b66fe2198251724cc02bf48f227a92fff19648c992e4e5452443c
- Size
  
  939KB
- MD5
  
  b91bf8420d94dcc8a07a54a68930a48a
- SHA1
  
  81b2516999b9fa2d3cfa0229709f938378e3208e
- SHA256
  
  abd6cb19839b66fe2198251724cc02bf48f227a92fff19648c992e4e5452443c
- SHA512
  
  8f5bf26df1a8d74edcc7986643502d8a95f4e4d7e4c508ff98fc9291017716989ae2043eb809730315c0f1491c87c4e8679163894bb22780614bac8c08735f27
- SSDEEP
  
  24576:IyMH53k74N4qrAEyyWn3XwF5pGvWNKtl0oxv:PMH+qMEueevWotl0o
Score

10^/10

discovery evasion persistence spyware stealer trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Windows security modification
  evasion trojan
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencespywarestealertrojan