d5c6645b82e5d204696605a7365fbee160d22bef0741a234d35203b3f9d08f60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5c6645b82e5d204696605a7365fbee160d22bef0741a234d35203b3f9d08f60
Size

359KB
Sample

230918-w5kkdsea74
MD5

93a15ae413ae7eea2fa8d717484d5451
SHA1

858bc170275abce260a233f7c69e1dcba2f5ab3e
SHA256

d5c6645b82e5d204696605a7365fbee160d22bef0741a234d35203b3f9d08f60
SHA512

3b78405bdd46edde9ca28c9e739cddf28b5410d4b448842ad1972832bd1b695d770b1d1a3c6675c24be95f606f90c048360cd4cb79a4e64447a0addc3b90e81b
SSDEEP

6144:xf9rLvoibN2iZxZLUQYqaaeFQq16Wb/EWdxasmHM9pd4vP6CKxOu3GTT:xVrToiNB5U5qEr9bMml6MB0oxOuWH

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  d5c6645b82e5d204696605a7365fbee160d22bef0741a234d35203b3f9d08f60
- Size
  
  359KB
- MD5
  
  93a15ae413ae7eea2fa8d717484d5451
- SHA1
  
  858bc170275abce260a233f7c69e1dcba2f5ab3e
- SHA256
  
  d5c6645b82e5d204696605a7365fbee160d22bef0741a234d35203b3f9d08f60
- SHA512
  
  3b78405bdd46edde9ca28c9e739cddf28b5410d4b448842ad1972832bd1b695d770b1d1a3c6675c24be95f606f90c048360cd4cb79a4e64447a0addc3b90e81b
- SSDEEP
  
  6144:xf9rLvoibN2iZxZLUQYqaaeFQq16Wb/EWdxasmHM9pd4vP6CKxOu3GTT:xVrToiNB5U5qEr9bMml6MB0oxOuWH
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer