2d68e2e5778b7c93f48224cbf667d44756160ba01439f238cae7bed77d981daf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d68e2e5778b7c93f48224cbf667d44756160ba01439f238cae7bed77d981daf_JC.exe
Size

397KB
Sample

230930-n51ydabd4z
MD5

6b85bd9855696dbca6f94a8e3717acc0
SHA1

297b4a4c120df756ef0fe2bad68af8ba910d9b2f
SHA256

2d68e2e5778b7c93f48224cbf667d44756160ba01439f238cae7bed77d981daf
SHA512

14806abd9ff096099f1a94961ec228ada25ed7cc156999d7521d6f467460518c7186486ea73aa4646122cb9b63e1560e882f9ce181558507af6484667cd8fa43
SSDEEP

12288:GhWaLqvSAVnxQjUk00+ihI+QycMATTDF:GQaLWDqjC0hhI+jXG

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  2d68e2e5778b7c93f48224cbf667d44756160ba01439f238cae7bed77d981daf_JC.exe
- Size
  
  397KB
- MD5
  
  6b85bd9855696dbca6f94a8e3717acc0
- SHA1
  
  297b4a4c120df756ef0fe2bad68af8ba910d9b2f
- SHA256
  
  2d68e2e5778b7c93f48224cbf667d44756160ba01439f238cae7bed77d981daf
- SHA512
  
  14806abd9ff096099f1a94961ec228ada25ed7cc156999d7521d6f467460518c7186486ea73aa4646122cb9b63e1560e882f9ce181558507af6484667cd8fa43
- SSDEEP
  
  12288:GhWaLqvSAVnxQjUk00+ihI+QycMATTDF:GQaLWDqjC0hhI+jXG
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer