adbe6354d46625f95936c017b5c2286b427cce7e676e200bf1cdc8bc06e8a962 | Triage

Sharing

General

Target

NEAS.dfb088b0b8d3b213188c8a3d84f43ec0.exe
Size

28KB
Sample

231021-1e5vvscc95
MD5

dfb088b0b8d3b213188c8a3d84f43ec0
SHA1

e2623d7c3dd23be36372f4c24fa4fa676640dbd5
SHA256

adbe6354d46625f95936c017b5c2286b427cce7e676e200bf1cdc8bc06e8a962
SHA512

506af10763f6e58d26973cf37425689e823ce2bb09912723e1242c54d9c78fd090fb42dfe349a54982652e3a16fbf8ae58e9c55b0a20fe1021bbccc1c7cc8a0b
SSDEEP

384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjv6VgiukN0i6:8Q3LotOPNSQVwVVxGKEvKHrV6aiM

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  NEAS.dfb088b0b8d3b213188c8a3d84f43ec0.exe
- Size
  
  28KB
- MD5
  
  dfb088b0b8d3b213188c8a3d84f43ec0
- SHA1
  
  e2623d7c3dd23be36372f4c24fa4fa676640dbd5
- SHA256
  
  adbe6354d46625f95936c017b5c2286b427cce7e676e200bf1cdc8bc06e8a962
- SHA512
  
  506af10763f6e58d26973cf37425689e823ce2bb09912723e1242c54d9c78fd090fb42dfe349a54982652e3a16fbf8ae58e9c55b0a20fe1021bbccc1c7cc8a0b
- SSDEEP
  
  384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjv6VgiukN0i6:8Q3LotOPNSQVwVVxGKEvKHrV6aiM
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer