1090a8d1ba7d8464488d6810e8a71d34f6e00d8a9611382319ef69112382561e | Triage

Sharing

General

Target

Dc2e9f2d2b64e84a2a25545d0b2380353635f.exe
Size

243KB
Sample

230821-tvrjvaec37
MD5

e32c433c9e1d82996a208a55ebce16e5
SHA1

ba15557f3846dced6256e00a47a977336425311f
SHA256

1090a8d1ba7d8464488d6810e8a71d34f6e00d8a9611382319ef69112382561e
SHA512

3a8b50878fee9ed93bbc12f1b85e1f2f4ed5c569a62c3fc71778f92530fa2047ae4fcf24362879d210303db96f80c18cdc4fd3b534c5df5647b58b3f5bf40554
SSDEEP

6144:3FgMpP+Oqum37ZUr6dgZTlpLdL+9bgwUzT7B:+MpPvqR7I6dgZT/dnwUnN

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  Dc2e9f2d2b64e84a2a25545d0b2380353635f.exe
- Size
  
  243KB
- MD5
  
  e32c433c9e1d82996a208a55ebce16e5
- SHA1
  
  ba15557f3846dced6256e00a47a977336425311f
- SHA256
  
  1090a8d1ba7d8464488d6810e8a71d34f6e00d8a9611382319ef69112382561e
- SHA512
  
  3a8b50878fee9ed93bbc12f1b85e1f2f4ed5c569a62c3fc71778f92530fa2047ae4fcf24362879d210303db96f80c18cdc4fd3b534c5df5647b58b3f5bf40554
- SSDEEP
  
  6144:3FgMpP+Oqum37ZUr6dgZTlpLdL+9bgwUzT7B:+MpPvqR7I6dgZT/dnwUnN
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2