90e60bee51afeab40b8d4a667faa74915d18ae3c688991c4977eb6afc6cea833 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c2484433bfb8f911edaf329935e4ea60_JC.exe
Size

234KB
Sample

231021-w3qnmaab89
MD5

c2484433bfb8f911edaf329935e4ea60
SHA1

0a978fff69931d0811f08b990c68aeff77eff802
SHA256

90e60bee51afeab40b8d4a667faa74915d18ae3c688991c4977eb6afc6cea833
SHA512

50ea2f2f29af3f4cd96ef5415d10134e48d3f2383f96dfbad332fe3977bce0ff8216fde5d26cac462dc54e3bd857f411527a05c510fdf9d38e0ded7ff7ab354c
SSDEEP

6144:J9VHLMcE9hirx+BG4fZRlQeUJmQnKm3bY:Fi6sB3BhUJmQK

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  NEAS.c2484433bfb8f911edaf329935e4ea60_JC.exe
- Size
  
  234KB
- MD5
  
  c2484433bfb8f911edaf329935e4ea60
- SHA1
  
  0a978fff69931d0811f08b990c68aeff77eff802
- SHA256
  
  90e60bee51afeab40b8d4a667faa74915d18ae3c688991c4977eb6afc6cea833
- SHA512
  
  50ea2f2f29af3f4cd96ef5415d10134e48d3f2383f96dfbad332fe3977bce0ff8216fde5d26cac462dc54e3bd857f411527a05c510fdf9d38e0ded7ff7ab354c
- SSDEEP
  
  6144:J9VHLMcE9hirx+BG4fZRlQeUJmQnKm3bY:Fi6sB3BhUJmQK
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2