621f6868f64f8cc1e88546314ed8ca71b4a64d31b1a76118a0cd8a7b8649b701 | Triage

Sharing

General

Target

621f6868f64f8cc1e88546314ed8ca71b4a64d31b1a76118a0cd8a7b8649b701
Size

800KB
Sample

231103-enffnsdg47
MD5

f9e4ecf03afcdaea463f8091ac4b1690
SHA1

8b98e543353e3772d11f109388fcb2537e903564
SHA256

621f6868f64f8cc1e88546314ed8ca71b4a64d31b1a76118a0cd8a7b8649b701
SHA512

5cfb6a97244486fa70da5eaf2ea7b4055f39fe48b179df77c5aa72e243df474e7b780d473d29f69d7b2b655f0cf9527aac1c31926fe42f7684b45587a66fbbf0
SSDEEP

24576:yC9VmtaT5x8fSY4355/bEMsm27tE91cLQsDogd:y7ta1x8m//oMsm27tosDxd

Score

6^/10

spyware

Malware Config

Targets

- Target
  
  621f6868f64f8cc1e88546314ed8ca71b4a64d31b1a76118a0cd8a7b8649b701
- Size
  
  800KB
- MD5
  
  f9e4ecf03afcdaea463f8091ac4b1690
- SHA1
  
  8b98e543353e3772d11f109388fcb2537e903564
- SHA256
  
  621f6868f64f8cc1e88546314ed8ca71b4a64d31b1a76118a0cd8a7b8649b701
- SHA512
  
  5cfb6a97244486fa70da5eaf2ea7b4055f39fe48b179df77c5aa72e243df474e7b780d473d29f69d7b2b655f0cf9527aac1c31926fe42f7684b45587a66fbbf0
- SSDEEP
  
  24576:yC9VmtaT5x8fSY4355/bEMsm27tE91cLQsDogd:y7ta1x8m//oMsm27tosDxd
Score

6^/10

spyware
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Remote System Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2