b2a96537b627cc5f7ed63b4b9491b9ea15b08c88dfdd5aeb7a00d903dd4d0176 | Triage

Sharing

General

Target

PixelSee_id1434217id.exe
Size

3.2MB
Sample

230619-kh1gjsdh2z
MD5

60849a8ff219be4bec52709173984455
SHA1

655f2a35efe59837b287d9b02c0c723f09a73a8b
SHA256

b2a96537b627cc5f7ed63b4b9491b9ea15b08c88dfdd5aeb7a00d903dd4d0176
SHA512

f6642be72c323d148ef1590ad1f341759f645af8cf537a4b1cea363768f412f8b4f0a7becd9f362c6442df706c0fbcb5b43824a299969a8e5704c436dfa5d19d
SSDEEP

49152:OYmOcTD7x4cPKESEzLU0Ava6yQdpM8nGWmIHa03okleDhojwVuaGfJb:eXx7Plvv1/QI8GWm03okl4E5

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  PixelSee_id1434217id.exe
- Size
  
  3.2MB
- MD5
  
  60849a8ff219be4bec52709173984455
- SHA1
  
  655f2a35efe59837b287d9b02c0c723f09a73a8b
- SHA256
  
  b2a96537b627cc5f7ed63b4b9491b9ea15b08c88dfdd5aeb7a00d903dd4d0176
- SHA512
  
  f6642be72c323d148ef1590ad1f341759f645af8cf537a4b1cea363768f412f8b4f0a7becd9f362c6442df706c0fbcb5b43824a299969a8e5704c436dfa5d19d
- SSDEEP
  
  49152:OYmOcTD7x4cPKESEzLU0Ava6yQdpM8nGWmIHa03okleDhojwVuaGfJb:eXx7Plvv1/QI8GWm03okl4E5
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks for any installed AV software in registry
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Security Software Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer