f43b73e7b8a3f314d38d3cc39129333670b79632861cb0a9a87ad162bf885eba | Triage

Sharing

General

Target

runnerforo.exe
Size

180KB
Sample

230420-mb1vvabc2x
MD5

52971ee4469d8c6627c9c5e80a5e7886
SHA1

90b2f2cf5d93b5dd5a2d1e89dff295ba6a531504
SHA256

f43b73e7b8a3f314d38d3cc39129333670b79632861cb0a9a87ad162bf885eba
SHA512

eff3a79beb79f55d1f6692765ea6983f418d28e199a95105738883b7ee9a7da02857ef6e9d88487609b631caf3306905c1eba4cdb0753a22a063c29ce180b04a
SSDEEP

3072:5d2u3DSb6ERhqxzk428VFYAIvrH6xnh+tZMUndLx5ZQhRCCW2iadTKNYTQ4uY:5sClO8VFYXDaVymhRLWladTKWKY

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  runnerforo.exe
- Size
  
  180KB
- MD5
  
  52971ee4469d8c6627c9c5e80a5e7886
- SHA1
  
  90b2f2cf5d93b5dd5a2d1e89dff295ba6a531504
- SHA256
  
  f43b73e7b8a3f314d38d3cc39129333670b79632861cb0a9a87ad162bf885eba
- SHA512
  
  eff3a79beb79f55d1f6692765ea6983f418d28e199a95105738883b7ee9a7da02857ef6e9d88487609b631caf3306905c1eba4cdb0753a22a063c29ce180b04a
- SSDEEP
  
  3072:5d2u3DSb6ERhqxzk428VFYAIvrH6xnh+tZMUndLx5ZQhRCCW2iadTKNYTQ4uY:5sClO8VFYXDaVymhRLWladTKWKY
Score

7^/10

spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2