3cd0ec7a1252c19d29976d22566a4282c341c3b4e6cc1d2099bf1d1097483334 | Triage

Sharing

General

Target

NEAS.5867b694fe9de064c613b8862b965ca0.exe
Size

425KB
Sample

231022-vwb18ade7y
MD5

5867b694fe9de064c613b8862b965ca0
SHA1

b4ef6f8e970b80fc3a0bac1b2a2a99365971f08d
SHA256

3cd0ec7a1252c19d29976d22566a4282c341c3b4e6cc1d2099bf1d1097483334
SHA512

643bb8609581281fed03ae86d9a3aa097f63705c3d23a33847eb09253e9d378c3527acc0897cdf48422128dbba76266c549bae7a92442c11a94eb9d8e366f2c3
SSDEEP

12288:Vzgd7ScCdFyrCl51xq7draauLyfIL0willVVnAVB/N:VgdjCdFyBLuLyfQirVWL1

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  NEAS.5867b694fe9de064c613b8862b965ca0.exe
- Size
  
  425KB
- MD5
  
  5867b694fe9de064c613b8862b965ca0
- SHA1
  
  b4ef6f8e970b80fc3a0bac1b2a2a99365971f08d
- SHA256
  
  3cd0ec7a1252c19d29976d22566a4282c341c3b4e6cc1d2099bf1d1097483334
- SHA512
  
  643bb8609581281fed03ae86d9a3aa097f63705c3d23a33847eb09253e9d378c3527acc0897cdf48422128dbba76266c549bae7a92442c11a94eb9d8e366f2c3
- SSDEEP
  
  12288:Vzgd7ScCdFyrCl51xq7draauLyfIL0willVVnAVB/N:VgdjCdFyBLuLyfQirVWL1
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2