1fa54ff273a68de08200ade3fb598df692108828cbe5f5f214483707a3fe4cf6 | Triage

Sharing

General

Target

d7066913f98233849a95ca7f4715f072_JC.exe
Size

104KB
Sample

230917-wsfexaca5y
MD5

d7066913f98233849a95ca7f4715f072
SHA1

6e9273d5d61db5a773db1dc0904ea92ea0e08c9b
SHA256

1fa54ff273a68de08200ade3fb598df692108828cbe5f5f214483707a3fe4cf6
SHA512

89620bab6244c3cb5a032a761dc3f7b2593ec47ce493100a09061af20e6de6ceed13ea00a907a89b7f2bf4284c6f79ec6d3d23b2c4f07c55462ad3bbb3866927
SSDEEP

1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlDuazTwru/Ci7PesalC97Oyt1+0ivFihHwEi:ZRpAyazIlyazTwraWPDi+05HIyG

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  d7066913f98233849a95ca7f4715f072_JC.exe
- Size
  
  104KB
- MD5
  
  d7066913f98233849a95ca7f4715f072
- SHA1
  
  6e9273d5d61db5a773db1dc0904ea92ea0e08c9b
- SHA256
  
  1fa54ff273a68de08200ade3fb598df692108828cbe5f5f214483707a3fe4cf6
- SHA512
  
  89620bab6244c3cb5a032a761dc3f7b2593ec47ce493100a09061af20e6de6ceed13ea00a907a89b7f2bf4284c6f79ec6d3d23b2c4f07c55462ad3bbb3866927
- SSDEEP
  
  1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlDuazTwru/Ci7PesalC97Oyt1+0ivFihHwEi:ZRpAyazIlyazTwraWPDi+05HIyG
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer