5b122ee4042d6674264625bd373c46910047160fc946d3e55058269056b31638 | Triage

Submit
Reports

Overview

overview

8

Static

static

3

winprofile

windows7-x64

8

winprofile

windows10-1703-x64

8

Sharing

General

Target

5b122ee4042d6674264625bd373c46910047160fc946d3e55058269056b31638
Size

183KB
Sample

231101-ederdsca37
MD5

270fbd197cdbcca79461942c4a014579
SHA1

7fe0055b5045d94781d1cc0aa72a8ed938928cb3
SHA256

5b122ee4042d6674264625bd373c46910047160fc946d3e55058269056b31638
SHA512

e9fb6996285903794b06baf5fb61c7264e44f60617b23d000f27bff74a58f41069408004ab457ee251d1db27bc25a52f452a51cb383025854fc9fe320360c151
SSDEEP

3072:etsyAavyjWPPM2n4jIn489I37F82X8mae8QvHkc:6syAqWqPM2SF89I3e28mF8

Score

8^/10

discovery spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

5b122ee4042d6674264625bd373c46910047160fc946d3e55058269056b31638.exe

Resource

win7-20231023-en

discovery spyware stealer

windows7-x64

11 signatures

300 seconds

Behavioral task

behavioral2

Sample

5b122ee4042d6674264625bd373c46910047160fc946d3e55058269056b31638.exe

Resource

win10-20231020-en

discovery spyware stealer

windows10-1703-x64

10 signatures

300 seconds

Malware Config

Targets

- Target
  
  5b122ee4042d6674264625bd373c46910047160fc946d3e55058269056b31638
- Size
  
  183KB
- MD5
  
  270fbd197cdbcca79461942c4a014579
- SHA1
  
  7fe0055b5045d94781d1cc0aa72a8ed938928cb3
- SHA256
  
  5b122ee4042d6674264625bd373c46910047160fc946d3e55058269056b31638
- SHA512
  
  e9fb6996285903794b06baf5fb61c7264e44f60617b23d000f27bff74a58f41069408004ab457ee251d1db27bc25a52f452a51cb383025854fc9fe320360c151
- SSDEEP
  
  3072:etsyAavyjWPPM2n4jIn489I37F82X8mae8QvHkc:6syAqWqPM2SF89I3e28mF8
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Deletes itself
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer

© 2018-2024

Terms | Privacy