f252274a873b52ec33625b8f8ddb77dcdf9dfc8781585d22461f11c9d337b39d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f252274a873b52ec33625b8f8ddb77dcdf9dfc8781585d22461f11c9d337b39d
Size

12.8MB
Sample

230508-plqhzacd2x
MD5

41fa51816abea20a91900edaf46d8512
SHA1

9e2364263c617c19930a1b374d0c87cf8ab4f6c8
SHA256

f252274a873b52ec33625b8f8ddb77dcdf9dfc8781585d22461f11c9d337b39d
SHA512

f36c72675bd15a43ed16f6b8e99ff5dd377fe2c7d000470e1ec6eb6500a08ff3956f00f5a9bb9ed2a8b80cc75b3033119eecbfc6a4c898f1c2cf903ea4df391e
SSDEEP

98304:6nVtvXa8QN5RRS8hS9/dSIrMyMjhbwg71EZ5wUYL5fi:6nVxxQ7NIdS4MyMjhEuG4Uy5q

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  f252274a873b52ec33625b8f8ddb77dcdf9dfc8781585d22461f11c9d337b39d
- Size
  
  12.8MB
- MD5
  
  41fa51816abea20a91900edaf46d8512
- SHA1
  
  9e2364263c617c19930a1b374d0c87cf8ab4f6c8
- SHA256
  
  f252274a873b52ec33625b8f8ddb77dcdf9dfc8781585d22461f11c9d337b39d
- SHA512
  
  f36c72675bd15a43ed16f6b8e99ff5dd377fe2c7d000470e1ec6eb6500a08ff3956f00f5a9bb9ed2a8b80cc75b3033119eecbfc6a4c898f1c2cf903ea4df391e
- SSDEEP
  
  98304:6nVtvXa8QN5RRS8hS9/dSIrMyMjhbwg71EZ5wUYL5fi:6nVxxQ7NIdS4MyMjhEuG4Uy5q
Score

7^/10

spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1