0c9a0701b4587ad60efd13261159ccf7459aa91326c5398f6b996736ef4fd5ba | Triage

Sharing

General

Target

NEAS.29319ae6af95a8e682b7ef5a7e655e90.exe
Size

6.1MB
Sample

231021-z4cpyabf91
MD5

29319ae6af95a8e682b7ef5a7e655e90
SHA1

4e99e1051948f5fe3bc2d4127d869db8be8ccdf8
SHA256

0c9a0701b4587ad60efd13261159ccf7459aa91326c5398f6b996736ef4fd5ba
SHA512

b5e63ca818ec02e39f1898f97df47157ccbe154a74cb530a7b35d4c141adeea4ac4124ad7553b1e90bed2446054a566dc60ae4cb97653c5512ffb65216993638
SSDEEP

196608:Sa+SfViblUHpgam3w2+wQtnKyFSTtmOZ3lzPj:Sa+SWlUHpe3w2Qk1T4Y1zP

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  NEAS.29319ae6af95a8e682b7ef5a7e655e90.exe
- Size
  
  6.1MB
- MD5
  
  29319ae6af95a8e682b7ef5a7e655e90
- SHA1
  
  4e99e1051948f5fe3bc2d4127d869db8be8ccdf8
- SHA256
  
  0c9a0701b4587ad60efd13261159ccf7459aa91326c5398f6b996736ef4fd5ba
- SHA512
  
  b5e63ca818ec02e39f1898f97df47157ccbe154a74cb530a7b35d4c141adeea4ac4124ad7553b1e90bed2446054a566dc60ae4cb97653c5512ffb65216993638
- SSDEEP
  
  196608:Sa+SfViblUHpgam3w2+wQtnKyFSTtmOZ3lzPj:Sa+SWlUHpe3w2Qk1T4Y1zP
Score

8^/10

spyware stealer
- Blocklisted process makes network request
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2