83379a60d92decf1e000a63d75326a0f682986cf8d6d8ff6b4a673667d900897 | Triage

Sharing

General

Target

83379a60d92decf1e000a63d75326a0f682986cf8d6d8ff6b4a673667d900897
Size

25KB
Sample

231012-12y1tsda2t
MD5

5a119f7ea1cd570cb227e27f4f27f73c
SHA1

07c5cca9b40e70361e991a8fe3c4f4bcc9bd805d
SHA256

83379a60d92decf1e000a63d75326a0f682986cf8d6d8ff6b4a673667d900897
SHA512

c7397eacca5bbd5243e34c6389e27190a25c7014b1e6140c54530640f9431ad53cdc5a7c0cace21dd8755a654b9980da51472159b61b873933b68a2d33caf9e8
SSDEEP

384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvdk6:8Q3LotOPNSQVwVVxGKEvKHrVdk6

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  83379a60d92decf1e000a63d75326a0f682986cf8d6d8ff6b4a673667d900897
- Size
  
  25KB
- MD5
  
  5a119f7ea1cd570cb227e27f4f27f73c
- SHA1
  
  07c5cca9b40e70361e991a8fe3c4f4bcc9bd805d
- SHA256
  
  83379a60d92decf1e000a63d75326a0f682986cf8d6d8ff6b4a673667d900897
- SHA512
  
  c7397eacca5bbd5243e34c6389e27190a25c7014b1e6140c54530640f9431ad53cdc5a7c0cace21dd8755a654b9980da51472159b61b873933b68a2d33caf9e8
- SSDEEP
  
  384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvdk6:8Q3LotOPNSQVwVVxGKEvKHrVdk6
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer