94554e1b98b18ba4acb922c60cc15599f2d26e3f5e26f2a33e50b63d72c5003e | Triage

Sharing

General

Target

file
Size

7.2MB
Sample

230830-a5e41sgh59
MD5

b9674d1bde76f639e61b00068a2c64e2
SHA1

98743bcfa8791edd6faf435b369afb966ee75f12
SHA256

94554e1b98b18ba4acb922c60cc15599f2d26e3f5e26f2a33e50b63d72c5003e
SHA512

ce66d00bd303027b56f74ea3e55ffd3077eaeed67a0fbd34185b94adc6a7ad6c8170dd7a06f29492d5248009a22445370fbc297ef2d29f488fd566e8c2f4e2bd
SSDEEP

196608:91OfcZO8H33MCSywKD3ch1RrR2A+BpFBBeoADG8zk:3OQHMlNKDMxcAkFlADG84

Score

10^/10

evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  file
- Size
  
  7.2MB
- MD5
  
  b9674d1bde76f639e61b00068a2c64e2
- SHA1
  
  98743bcfa8791edd6faf435b369afb966ee75f12
- SHA256
  
  94554e1b98b18ba4acb922c60cc15599f2d26e3f5e26f2a33e50b63d72c5003e
- SHA512
  
  ce66d00bd303027b56f74ea3e55ffd3077eaeed67a0fbd34185b94adc6a7ad6c8170dd7a06f29492d5248009a22445370fbc297ef2d29f488fd566e8c2f4e2bd
- SSDEEP
  
  196608:91OfcZO8H33MCSywKD3ch1RrR2A+BpFBBeoADG8zk:3OQHMlNKDMxcAkFlADG84
Score

10^/10

evasion spyware stealer trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Create or Modify System Process

Windows Service

Scheduled Task/Job

Privilege Escalation

Create or Modify System Process

Windows Service

Scheduled Task/Job

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionspywarestealertrojan

behavioral2