54b688d49ee9cf8ee731bc8500d2c1b04cc6e2860b5dc9f4fd4bef937019b2df | Triage

Sharing

General

Target

NEAS.4d52f7a8d0358b5f059e62c80b155990.exe
Size

296KB
Sample

231013-y51ygsbc96
MD5

4d52f7a8d0358b5f059e62c80b155990
SHA1

adcf8469983835cde71a77e67b0bae6a5a46eda6
SHA256

54b688d49ee9cf8ee731bc8500d2c1b04cc6e2860b5dc9f4fd4bef937019b2df
SHA512

a5325d6e91024c5f20942a447c3561c9686a024051037340dcd74ad242352cabea9e30d1241dcddb469e04fa062a9dce2b601a9f9f4134d36e0f49d175f66c16
SSDEEP

6144:+Vx9CTB92ZYGRGyL64VQUhDek1Gjur69bWDX9oEx1ux2V+VSTUd3:+Vx9CT2GyL5aUIk2uaqDtoibV+wm3

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  NEAS.4d52f7a8d0358b5f059e62c80b155990.exe
- Size
  
  296KB
- MD5
  
  4d52f7a8d0358b5f059e62c80b155990
- SHA1
  
  adcf8469983835cde71a77e67b0bae6a5a46eda6
- SHA256
  
  54b688d49ee9cf8ee731bc8500d2c1b04cc6e2860b5dc9f4fd4bef937019b2df
- SHA512
  
  a5325d6e91024c5f20942a447c3561c9686a024051037340dcd74ad242352cabea9e30d1241dcddb469e04fa062a9dce2b601a9f9f4134d36e0f49d175f66c16
- SSDEEP
  
  6144:+Vx9CTB92ZYGRGyL64VQUhDek1Gjur69bWDX9oEx1ux2V+VSTUd3:+Vx9CT2GyL5aUIk2uaqDtoibV+wm3
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2