3c61b88870ef440db52cc894150eccb99f8ae916c06ea49c2da88fcb8a79f74b | Triage

Sharing

General

Target

1a0ca36bae42036e20701b20fabe79eb_JC.exe
Size

89KB
Sample

231012-xw8fjaac9y
MD5

1a0ca36bae42036e20701b20fabe79eb
SHA1

501a9d3feaaacf796853ba17d7c266864bb053a4
SHA256

3c61b88870ef440db52cc894150eccb99f8ae916c06ea49c2da88fcb8a79f74b
SHA512

f021dbd79f6b08eda6bfbc7c1649b78c4dbaab9afdf8478d7cc09e8f496733079e32a7de824525135e3b6d52c6c4f6a013c71775dfc2240005a65dfbcd7b593e
SSDEEP

1536:AKcR4mjD9r823FLWlrUVFHc3vKgAfV8mwrfE2ixTPm4:AKcWmjRrz3ZfRc3cfV6r82yzm4

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  1a0ca36bae42036e20701b20fabe79eb_JC.exe
- Size
  
  89KB
- MD5
  
  1a0ca36bae42036e20701b20fabe79eb
- SHA1
  
  501a9d3feaaacf796853ba17d7c266864bb053a4
- SHA256
  
  3c61b88870ef440db52cc894150eccb99f8ae916c06ea49c2da88fcb8a79f74b
- SHA512
  
  f021dbd79f6b08eda6bfbc7c1649b78c4dbaab9afdf8478d7cc09e8f496733079e32a7de824525135e3b6d52c6c4f6a013c71775dfc2240005a65dfbcd7b593e
- SSDEEP
  
  1536:AKcR4mjD9r823FLWlrUVFHc3vKgAfV8mwrfE2ixTPm4:AKcWmjRrz3ZfRc3cfV6r82yzm4
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer