0a844270bff0529cdeb039fcfa251771168478c751c9d90ffdfe961079b6999e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FACTURA_ARIZALA.pif.exe
Size

263KB
Sample

230502-jj9wyabh9y
MD5

c75c41bbbd82ea5a44d68fbba5de6b2c
SHA1

6bb6ce62c235beab31e356fe8956a476f336b17e
SHA256

0a844270bff0529cdeb039fcfa251771168478c751c9d90ffdfe961079b6999e
SHA512

0d174833e2be53af26e394e2020833f838ba7f3f22eba1a136cf087fbccc893c92a2354ff7b2a346c57b7da42940a06d83f4c814162ab4cfc05e14bd29167a13
SSDEEP

6144:MVr6xfsOp965hqulmvWLx/Vu31oIXLvYXXA:vLvmhjQvUxVKqA

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  FACTURA_ARIZALA.pif.exe
- Size
  
  263KB
- MD5
  
  c75c41bbbd82ea5a44d68fbba5de6b2c
- SHA1
  
  6bb6ce62c235beab31e356fe8956a476f336b17e
- SHA256
  
  0a844270bff0529cdeb039fcfa251771168478c751c9d90ffdfe961079b6999e
- SHA512
  
  0d174833e2be53af26e394e2020833f838ba7f3f22eba1a136cf087fbccc893c92a2354ff7b2a346c57b7da42940a06d83f4c814162ab4cfc05e14bd29167a13
- SSDEEP
  
  6144:MVr6xfsOp965hqulmvWLx/Vu31oIXLvYXXA:vLvmhjQvUxVKqA
Score

7^/10

spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2