e4ae6a2be9688352efd34a054077fc4ce6131fc756bb2f33da7194c80a5a5779 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0d88e248bc2dd5aab87f49c15a536520.exe
Size

305KB
Sample

231101-q6r3zabe42
MD5

0d88e248bc2dd5aab87f49c15a536520
SHA1

c2869737c885694d4b8abb4fd873e177b78504ab
SHA256

e4ae6a2be9688352efd34a054077fc4ce6131fc756bb2f33da7194c80a5a5779
SHA512

e4c512e3c5a499f52dc2ad474033c591b5171fd641a90bf5071f28b5795a6f302d925e50c072392fbbb22fc37db36aa7a830cceb97aea242116053ce1634ac4e
SSDEEP

6144:utCccCDTc6zSl3Ee+LztkTUyk6RTC2eHrCUC:1CDTzk3ETLRkM6gLCUC

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  NEAS.0d88e248bc2dd5aab87f49c15a536520.exe
- Size
  
  305KB
- MD5
  
  0d88e248bc2dd5aab87f49c15a536520
- SHA1
  
  c2869737c885694d4b8abb4fd873e177b78504ab
- SHA256
  
  e4ae6a2be9688352efd34a054077fc4ce6131fc756bb2f33da7194c80a5a5779
- SHA512
  
  e4c512e3c5a499f52dc2ad474033c591b5171fd641a90bf5071f28b5795a6f302d925e50c072392fbbb22fc37db36aa7a830cceb97aea242116053ce1634ac4e
- SSDEEP
  
  6144:utCccCDTc6zSl3Ee+LztkTUyk6RTC2eHrCUC:1CDTzk3ETLRkM6gLCUC
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2