5ae885bc1aa33704f905038d1d40ebf5f26933782ac5cb889c34cd2d0ef25e17 | Triage

Resubmissions

30-01-2024 18:26

240130-w3g2gsafc6 10

28-07-2023 07:49

230728-jn15lach5t 7

Sharing

General

Target

5ae885bc1aa33704f905038d1d40ebf5f26933782ac5cb889c34cd2d0ef25e17
Size

97KB
Sample

230728-jn15lach5t
MD5

7a6fbbdbda6bb4680d112c322b61e0bd
SHA1

d5bef524b2f39775fe075e4d6d27386b663ec9e8
SHA256

5ae885bc1aa33704f905038d1d40ebf5f26933782ac5cb889c34cd2d0ef25e17
SHA512

89b1c0b5b24922abc3efb4b4bc2be601f4d5b59f2084d327b89bb5ee8533af7f1a338d0481b59bbaa3add066c3a6ee6cd3f7c3eac8951028d7eb56699ad998be
SSDEEP

3072:1nYleseuHdMKKcZOVPfDSwlZYHAlI5cNtM:Vqes3HdMKKc0PfDSQZmY1

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  5ae885bc1aa33704f905038d1d40ebf5f26933782ac5cb889c34cd2d0ef25e17
- Size
  
  97KB
- MD5
  
  7a6fbbdbda6bb4680d112c322b61e0bd
- SHA1
  
  d5bef524b2f39775fe075e4d6d27386b663ec9e8
- SHA256
  
  5ae885bc1aa33704f905038d1d40ebf5f26933782ac5cb889c34cd2d0ef25e17
- SHA512
  
  89b1c0b5b24922abc3efb4b4bc2be601f4d5b59f2084d327b89bb5ee8533af7f1a338d0481b59bbaa3add066c3a6ee6cd3f7c3eac8951028d7eb56699ad998be
- SSDEEP
  
  3072:1nYleseuHdMKKcZOVPfDSwlZYHAlI5cNtM:Vqes3HdMKKc0PfDSQZmY1
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2