e29be50482da3993f9c5b1ac46dcfcaf51670e2dd3fef1c2f60db16d88b06bf0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e29be50482da3993f9c5b1ac46dcfcaf51670e2dd3fef1c2f60db16d88b06bf0_JC.exe
Size

650KB
Sample

230815-tjjd4abf82
MD5

109afe7d74a1876e1d7c1a41daf67b27
SHA1

de134bca5f2a6d80aab4ea85dc5fef5a17205790
SHA256

e29be50482da3993f9c5b1ac46dcfcaf51670e2dd3fef1c2f60db16d88b06bf0
SHA512

02530293090da40e72251ebca03f0d5fa5a4a289ac769a919cee5ca321c380f74af2ff4a8534d4b080cb3669cc0a3dee392d63a26a8d083d9c2f801edbf7f915
SSDEEP

12288:r5CsQfDUcXaRZC2GtVJ4WHilIjErEvMO9AnhKGkMANxU:FCNLRMvCVJ/OrEvM+2h8MArU

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  e29be50482da3993f9c5b1ac46dcfcaf51670e2dd3fef1c2f60db16d88b06bf0_JC.exe
- Size
  
  650KB
- MD5
  
  109afe7d74a1876e1d7c1a41daf67b27
- SHA1
  
  de134bca5f2a6d80aab4ea85dc5fef5a17205790
- SHA256
  
  e29be50482da3993f9c5b1ac46dcfcaf51670e2dd3fef1c2f60db16d88b06bf0
- SHA512
  
  02530293090da40e72251ebca03f0d5fa5a4a289ac769a919cee5ca321c380f74af2ff4a8534d4b080cb3669cc0a3dee392d63a26a8d083d9c2f801edbf7f915
- SSDEEP
  
  12288:r5CsQfDUcXaRZC2GtVJ4WHilIjErEvMO9AnhKGkMANxU:FCNLRMvCVJ/OrEvM+2h8MArU
Score

7^/10

spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2