ded04d5d09fd40a93e25a6f2511eb006f67572fedd393442a1d3905e3e8701ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded04d5d09fd40a93e25a6f2511eb006f67572fedd393442a1d3905e3e8701ec
Size

2.6MB
Sample

231006-zr2hjaab72
MD5

79a78fa892a2b4c5e61bf38a7f90cb22
SHA1

a36bac1c501cf15f4ee5356bdb02579206b7772c
SHA256

ded04d5d09fd40a93e25a6f2511eb006f67572fedd393442a1d3905e3e8701ec
SHA512

3a1aa0b30e459e2ef3b63ce9d06e69939e91c8d5539ce6773e8da636fb73c8f63fc6502b21fc8ab86b6e259f366f29effd7ff0eb5418ff841da49300cbf20521
SSDEEP

49152:sEd+80Ki0tp9sz0KGhRMZg8w7XjYRUEEpXhEQTZ1lsc07Pz7n6Axk69ZClfs7:XATE9souZg8wnkU32z7nTk69

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  ded04d5d09fd40a93e25a6f2511eb006f67572fedd393442a1d3905e3e8701ec
- Size
  
  2.6MB
- MD5
  
  79a78fa892a2b4c5e61bf38a7f90cb22
- SHA1
  
  a36bac1c501cf15f4ee5356bdb02579206b7772c
- SHA256
  
  ded04d5d09fd40a93e25a6f2511eb006f67572fedd393442a1d3905e3e8701ec
- SHA512
  
  3a1aa0b30e459e2ef3b63ce9d06e69939e91c8d5539ce6773e8da636fb73c8f63fc6502b21fc8ab86b6e259f366f29effd7ff0eb5418ff841da49300cbf20521
- SSDEEP
  
  49152:sEd+80Ki0tp9sz0KGhRMZg8w7XjYRUEEpXhEQTZ1lsc07Pz7n6Axk69ZClfs7:XATE9souZg8wnkU32z7nTk69
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2