eaf0b83166fa34e9c7aeb111f1a0aac02cd227c1506a0df15ed8e6b8302b44b0 | Triage

Sharing

General

Target

eaf0b83166fa34e9c7aeb111f1a0aac02cd227c1506a0df15ed8e6b8302b44b0
Size

538KB
Sample

230901-j51v6ade5t
MD5

dae3997523fb2ff22f7ac6f3312098f2
SHA1

b3747a50de49c25707146913200f3e1f915daaf4
SHA256

eaf0b83166fa34e9c7aeb111f1a0aac02cd227c1506a0df15ed8e6b8302b44b0
SHA512

d2f3023647cb7334fee3cc0fe4ca155b03f360d952c11c1b2538d09fd950fd7a1ba7e65dfd43aa3a2e5bcfd94b58974c14d5196efd9fce2b36cc8f29bd1474c3
SSDEEP

6144:VAMrRancWbSOj38epOCUBpEIfQ7J6OsIjD+1pdWBoRCtZH9IU/gLUebH/:VAMrRmbqepHmWQQl654TBJdjgLUeL/

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  eaf0b83166fa34e9c7aeb111f1a0aac02cd227c1506a0df15ed8e6b8302b44b0
- Size
  
  538KB
- MD5
  
  dae3997523fb2ff22f7ac6f3312098f2
- SHA1
  
  b3747a50de49c25707146913200f3e1f915daaf4
- SHA256
  
  eaf0b83166fa34e9c7aeb111f1a0aac02cd227c1506a0df15ed8e6b8302b44b0
- SHA512
  
  d2f3023647cb7334fee3cc0fe4ca155b03f360d952c11c1b2538d09fd950fd7a1ba7e65dfd43aa3a2e5bcfd94b58974c14d5196efd9fce2b36cc8f29bd1474c3
- SSDEEP
  
  6144:VAMrRancWbSOj38epOCUBpEIfQ7J6OsIjD+1pdWBoRCtZH9IU/gLUebH/:VAMrRmbqepHmWQQl654TBJdjgLUeL/
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer