36753f23b5ea090c3abe992f438886b4db16e7a99759e94a1b0a45a1fc89148d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36753f23b5ea090c3abe992f438886b4db16e7a99759e94a1b0a45a1fc89148d
Size

473KB
Sample

230424-phbkmsdd4t
MD5

9479f570188fb77230b3d92129325abe
SHA1

b8988dc66dbb0492ef62b6de70474b70dc03c9b7
SHA256

36753f23b5ea090c3abe992f438886b4db16e7a99759e94a1b0a45a1fc89148d
SHA512

a7ce6ee46687c7b9c4f71c8c8651f2e6d3aecc3be9a1839b561934df9082fc46c3c17650eb555045b2ef314f4056a6639387ded8c31a81be62572d20dd23e6ce
SSDEEP

12288:11P2y1C4r+diekH2bqijfy9+AFzUER+FnyC1:1xB1C4mkHSYdUmgyE

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  36753f23b5ea090c3abe992f438886b4db16e7a99759e94a1b0a45a1fc89148d
- Size
  
  473KB
- MD5
  
  9479f570188fb77230b3d92129325abe
- SHA1
  
  b8988dc66dbb0492ef62b6de70474b70dc03c9b7
- SHA256
  
  36753f23b5ea090c3abe992f438886b4db16e7a99759e94a1b0a45a1fc89148d
- SHA512
  
  a7ce6ee46687c7b9c4f71c8c8651f2e6d3aecc3be9a1839b561934df9082fc46c3c17650eb555045b2ef314f4056a6639387ded8c31a81be62572d20dd23e6ce
- SSDEEP
  
  12288:11P2y1C4r+diekH2bqijfy9+AFzUER+FnyC1:1xB1C4mkHSYdUmgyE
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer