35024ec1080dbea4c5a2eeeb6bb0e2c1425e4c49e83ace7d10d86a5ed63dab14 | Triage

Sharing

General

Target

35024ec1080dbea4c5a2eeeb6bb0e2c1425e4c49e83ace7d10d86a5ed63dab14
Size

25KB
Sample

231016-ne3z2sdf81
MD5

86dc6e77c4a38d12103474e68e8d4005
SHA1

907ebb2a6c11427d2c5d6bf43800666d28fb282b
SHA256

35024ec1080dbea4c5a2eeeb6bb0e2c1425e4c49e83ace7d10d86a5ed63dab14
SHA512

af3f9989efa193087cb4eff2d0289198637308667af966b2b1a5bf591763db42ef0fb2241ba58bba9479cac35d6f2af18e4948823bb27d58fa5d2ab38619498c
SSDEEP

384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvr:8Q3LotOPNSQVwVVxGKEvKHrVr

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  35024ec1080dbea4c5a2eeeb6bb0e2c1425e4c49e83ace7d10d86a5ed63dab14
- Size
  
  25KB
- MD5
  
  86dc6e77c4a38d12103474e68e8d4005
- SHA1
  
  907ebb2a6c11427d2c5d6bf43800666d28fb282b
- SHA256
  
  35024ec1080dbea4c5a2eeeb6bb0e2c1425e4c49e83ace7d10d86a5ed63dab14
- SHA512
  
  af3f9989efa193087cb4eff2d0289198637308667af966b2b1a5bf591763db42ef0fb2241ba58bba9479cac35d6f2af18e4948823bb27d58fa5d2ab38619498c
- SSDEEP
  
  384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvr:8Q3LotOPNSQVwVVxGKEvKHrVr
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer