c42b0d200c2022fba3332dd1078cf1412ba37eb52bd74acf7edb4672b1d0f330 | Triage

Sharing

General

Target

c42b0d200c2022fba3332dd1078cf1412ba37eb52bd74acf7edb4672b1d0f330
Size

588KB
Sample

230829-pvsppace54
MD5

f27e401f211c1ec6b903b55223a36bf4
SHA1

d6c7e39edb6cdbb393c84d31008ff9f131462903
SHA256

c42b0d200c2022fba3332dd1078cf1412ba37eb52bd74acf7edb4672b1d0f330
SHA512

5bd3c33dd7bed7df79821710011b14401d39d09739f5fdc96b7404f0d484b83c39f05ffbb433402263689ad7b77bfcfb4d75f1d63c71a141aa031ab8a64e8e41
SSDEEP

12288:GcRgVbIT/aB78Y9aJkDmzvFLg46Lmor16:XRgV0nSSdL4LrrE

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  c42b0d200c2022fba3332dd1078cf1412ba37eb52bd74acf7edb4672b1d0f330
- Size
  
  588KB
- MD5
  
  f27e401f211c1ec6b903b55223a36bf4
- SHA1
  
  d6c7e39edb6cdbb393c84d31008ff9f131462903
- SHA256
  
  c42b0d200c2022fba3332dd1078cf1412ba37eb52bd74acf7edb4672b1d0f330
- SHA512
  
  5bd3c33dd7bed7df79821710011b14401d39d09739f5fdc96b7404f0d484b83c39f05ffbb433402263689ad7b77bfcfb4d75f1d63c71a141aa031ab8a64e8e41
- SSDEEP
  
  12288:GcRgVbIT/aB78Y9aJkDmzvFLg46Lmor16:XRgV0nSSdL4LrrE
Score

7^/10

spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1