aafdc3ff9898de64c2bd829bd9db3265a52dc9744736b0387ce75ec1d0e61247 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.aafdc3ff9898de64c2bd829bd9db3265a52dc9744736b0387ce75ec1d0e61247.exe
Size

192KB
Sample

231114-l4fjyabb4x
MD5

c83f04ec48bf03b7e2c2bb3c17b67ef2
SHA1

725944f6228a42f0f7ada945162b9db16d7c7807
SHA256

aafdc3ff9898de64c2bd829bd9db3265a52dc9744736b0387ce75ec1d0e61247
SHA512

baa1e2e447df1a4dd3b873c7fddee8d792ba44512f866ffbd5be9ba9ee96d9dcae365cd96de2caaef9ebb2bccaea3d6987e1ba244726f4a265949a59d0724b52
SSDEEP

6144:2B8cpwUSK2D54fcNRS5GqZ+WutMIWWVXCz:2OcpdSYkNRS5GqZ+WutMWVy

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  NEAS.aafdc3ff9898de64c2bd829bd9db3265a52dc9744736b0387ce75ec1d0e61247.exe
- Size
  
  192KB
- MD5
  
  c83f04ec48bf03b7e2c2bb3c17b67ef2
- SHA1
  
  725944f6228a42f0f7ada945162b9db16d7c7807
- SHA256
  
  aafdc3ff9898de64c2bd829bd9db3265a52dc9744736b0387ce75ec1d0e61247
- SHA512
  
  baa1e2e447df1a4dd3b873c7fddee8d792ba44512f866ffbd5be9ba9ee96d9dcae365cd96de2caaef9ebb2bccaea3d6987e1ba244726f4a265949a59d0724b52
- SSDEEP
  
  6144:2B8cpwUSK2D54fcNRS5GqZ+WutMIWWVXCz:2OcpdSYkNRS5GqZ+WutMWVy
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2