606bdf6fbf75b603475e375157e635f10a6c88a08a47daf53b1c5512ea4178f6 | Triage

Sharing

General

Target

606bdf6fbf75b603475e375157e635f10a6c88a08a47daf53b1c5512ea4178f6
Size

25KB
Sample

231015-aah77ace7s
MD5

a8a27f9fb9bd5e086b44c5be4b8d6ab9
SHA1

7a930c688c1908f2c48a8402b65c0794d581c27e
SHA256

606bdf6fbf75b603475e375157e635f10a6c88a08a47daf53b1c5512ea4178f6
SHA512

6e7bbada9dd77c2a2cc2fcc39c4e42546aa1c4203a64dcd45bfe2ec3ead89cbdbb9e7297236f49663c17b62d27d86f491b3afd9634548164864d7117a1aaa8d0
SSDEEP

384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvK:8Q3LotOPNSQVwVVxGKEvKHrVK

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  606bdf6fbf75b603475e375157e635f10a6c88a08a47daf53b1c5512ea4178f6
- Size
  
  25KB
- MD5
  
  a8a27f9fb9bd5e086b44c5be4b8d6ab9
- SHA1
  
  7a930c688c1908f2c48a8402b65c0794d581c27e
- SHA256
  
  606bdf6fbf75b603475e375157e635f10a6c88a08a47daf53b1c5512ea4178f6
- SHA512
  
  6e7bbada9dd77c2a2cc2fcc39c4e42546aa1c4203a64dcd45bfe2ec3ead89cbdbb9e7297236f49663c17b62d27d86f491b3afd9634548164864d7117a1aaa8d0
- SSDEEP
  
  384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvK:8Q3LotOPNSQVwVVxGKEvKHrVK
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer