2c9fc24d6b2c6a8c4b8e4b9ca0cd93b6bcd72d5e41291fea35b9fa144bd197f5 | Triage

Sharing

General

Target

2c9fc24d6b2c6a8c4b8e4b9ca0cd93b6bcd72d5e41291fea35b9fa144bd197f5
Size

25KB
Sample

231011-lyklpsfd6s
MD5

2ca55b2dfe1e5515e8ae20288e11b8b5
SHA1

e3a22fab668ae0accb2f3ba330771cd4b59ba8b8
SHA256

2c9fc24d6b2c6a8c4b8e4b9ca0cd93b6bcd72d5e41291fea35b9fa144bd197f5
SHA512

9d617d3f6db74a66c34eda75f19725746fbd2cbf155be7a87404ce955006869e0f2f0c6d92d57ad8a332672c18276b5999bd2fc4810b6123e9154d4b52851abb
SSDEEP

384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvu:8Q3LotOPNSQVwVVxGKEvKHrVu

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2c9fc24d6b2c6a8c4b8e4b9ca0cd93b6bcd72d5e41291fea35b9fa144bd197f5
- Size
  
  25KB
- MD5
  
  2ca55b2dfe1e5515e8ae20288e11b8b5
- SHA1
  
  e3a22fab668ae0accb2f3ba330771cd4b59ba8b8
- SHA256
  
  2c9fc24d6b2c6a8c4b8e4b9ca0cd93b6bcd72d5e41291fea35b9fa144bd197f5
- SHA512
  
  9d617d3f6db74a66c34eda75f19725746fbd2cbf155be7a87404ce955006869e0f2f0c6d92d57ad8a332672c18276b5999bd2fc4810b6123e9154d4b52851abb
- SSDEEP
  
  384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvu:8Q3LotOPNSQVwVVxGKEvKHrVu
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer