0ce47484d2f37edfe4f575a4681b35712edf8aedeea6b30f2ce167ef3f3a0942 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ce47484d2f37edfe4f575a4681b35712edf8aedeea6b30f2ce167ef3f3a0942
Size

367KB
Sample

230515-mdsx1sfg45
MD5

b25539ffe3c516715ff4e4e2c0afdd56
SHA1

4dc6ef9675522108aa3f53db734138e2769211eb
SHA256

0ce47484d2f37edfe4f575a4681b35712edf8aedeea6b30f2ce167ef3f3a0942
SHA512

052032e62b9ef764711878ca4c113d14e8f0848086c047a4b5d74bde2774721281f87174d3c2c51e9f62c3a32613af74babb31b864203d5c99d652be6c51c4e2
SSDEEP

6144:Aq4nvLcXo+J32qqhDABarNFcjjfQXr0WUjspROzRXaoZc3RaaY7MZ:2nvLeoa4rPcvQb0iROzYoZflY

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  0ce47484d2f37edfe4f575a4681b35712edf8aedeea6b30f2ce167ef3f3a0942
- Size
  
  367KB
- MD5
  
  b25539ffe3c516715ff4e4e2c0afdd56
- SHA1
  
  4dc6ef9675522108aa3f53db734138e2769211eb
- SHA256
  
  0ce47484d2f37edfe4f575a4681b35712edf8aedeea6b30f2ce167ef3f3a0942
- SHA512
  
  052032e62b9ef764711878ca4c113d14e8f0848086c047a4b5d74bde2774721281f87174d3c2c51e9f62c3a32613af74babb31b864203d5c99d652be6c51c4e2
- SSDEEP
  
  6144:Aq4nvLcXo+J32qqhDABarNFcjjfQXr0WUjspROzRXaoZc3RaaY7MZ:2nvLeoa4rPcvQb0iROzYoZflY
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer