87f4ea22aa5ef51cc3863e925ad5770870a8464bcfd2bdcb524e97a515ec091f | Triage

Sharing

General

Target

87f4ea22aa5ef51cc3863e925ad5770870a8464bcfd2bdcb524e97a515ec091f
Size

25KB
Sample

231012-qdam8adc68
MD5

6f04e6b7e70fc8c5f792adc60f9fbdbb
SHA1

3bcb33d409bd2b0e2ab9171bc880426f9a52eaeb
SHA256

87f4ea22aa5ef51cc3863e925ad5770870a8464bcfd2bdcb524e97a515ec091f
SHA512

4c5a0010c00121f96dfc3a563c12116895a0c06dc3f4b48f4141d10caff724b9f11396b68add2146404313e4d313778d8d5c97c64802e95ecdb867049a5b46ed
SSDEEP

384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvbmv:8Q3LotOPNSQVwVVxGKEvKHrVbc

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  87f4ea22aa5ef51cc3863e925ad5770870a8464bcfd2bdcb524e97a515ec091f
- Size
  
  25KB
- MD5
  
  6f04e6b7e70fc8c5f792adc60f9fbdbb
- SHA1
  
  3bcb33d409bd2b0e2ab9171bc880426f9a52eaeb
- SHA256
  
  87f4ea22aa5ef51cc3863e925ad5770870a8464bcfd2bdcb524e97a515ec091f
- SHA512
  
  4c5a0010c00121f96dfc3a563c12116895a0c06dc3f4b48f4141d10caff724b9f11396b68add2146404313e4d313778d8d5c97c64802e95ecdb867049a5b46ed
- SSDEEP
  
  384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvbmv:8Q3LotOPNSQVwVVxGKEvKHrVbc
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer