90ef833e41807b3b93eb38186becc20d756c939967cb9bdda6fb78c22c68fc72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AssistenzaUESSE_old.exe
Size

16.7MB
Sample

230614-tc3t6abb2w
MD5

eae0b3a74094c6696e6d5b0b03851f57
SHA1

82180b946905bc08f6871985b9fec700555f240f
SHA256

90ef833e41807b3b93eb38186becc20d756c939967cb9bdda6fb78c22c68fc72
SHA512

615e8dddbf5e45aea568dd8519fab5ddf273a0f255a5e51c7d0957e0e7a3c628b4d0b16f76c5a33f0f0ed82babadb5c0c273a4dd243855c82f265cb231750c2f
SSDEEP

393216:lWto+AK/jGf1sygp1/IE1QtywamMtuMPKKIj34tdAz+:lqjGdsyw1F2y/mMtuMPFIb4tdAz+

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  AssistenzaUESSE_old.exe
- Size
  
  16.7MB
- MD5
  
  eae0b3a74094c6696e6d5b0b03851f57
- SHA1
  
  82180b946905bc08f6871985b9fec700555f240f
- SHA256
  
  90ef833e41807b3b93eb38186becc20d756c939967cb9bdda6fb78c22c68fc72
- SHA512
  
  615e8dddbf5e45aea568dd8519fab5ddf273a0f255a5e51c7d0957e0e7a3c628b4d0b16f76c5a33f0f0ed82babadb5c0c273a4dd243855c82f265cb231750c2f
- SSDEEP
  
  393216:lWto+AK/jGf1sygp1/IE1QtywamMtuMPKKIj34tdAz+:lqjGdsyw1F2y/mMtuMPFIb4tdAz+
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2