005360f36d6b7bf31717fb5ba88f844bdf5455dfbd9f84894a8c1e53f7f5ef51 | Triage

Sharing

General

Target

005360f36d6b7bf31717fb5ba88f844bdf5455dfbd9f84894a8c1e53f7f5ef51_JC.exe
Size

11.0MB
Sample

231010-1nhrpade6w
MD5

a980bdb5b5e023fe9bb2d879eb2d255b
SHA1

eea83c8b6819ec7e4b8b10fd51904befb8337263
SHA256

005360f36d6b7bf31717fb5ba88f844bdf5455dfbd9f84894a8c1e53f7f5ef51
SHA512

2d7b80c50dc76919b9b1c90af29b4adc335b21e90946ab95e01d014e5d148814866f9a753a8c95d54f74f75b0e3f9b866c68e269b1c355012e7d0b5d97141ff5
SSDEEP

3072:dveHSwh+d9yWklYTRobHJeIiSs9k6Mj4f4lJ/NVwzgypopOaQ:QHwDTRAHJJs9ktj7J/fyDa

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  005360f36d6b7bf31717fb5ba88f844bdf5455dfbd9f84894a8c1e53f7f5ef51_JC.exe
- Size
  
  11.0MB
- MD5
  
  a980bdb5b5e023fe9bb2d879eb2d255b
- SHA1
  
  eea83c8b6819ec7e4b8b10fd51904befb8337263
- SHA256
  
  005360f36d6b7bf31717fb5ba88f844bdf5455dfbd9f84894a8c1e53f7f5ef51
- SHA512
  
  2d7b80c50dc76919b9b1c90af29b4adc335b21e90946ab95e01d014e5d148814866f9a753a8c95d54f74f75b0e3f9b866c68e269b1c355012e7d0b5d97141ff5
- SSDEEP
  
  3072:dveHSwh+d9yWklYTRobHJeIiSs9k6Mj4f4lJ/NVwzgypopOaQ:QHwDTRAHJJs9ktj7J/fyDa
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer