6b6b90288f74c08faf4d42b41303fcf607e3132a198ae1c894d9de187b6dc9fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b6b90288f74c08faf4d42b41303fcf607e3132a198ae1c894d9de187b6dc9fd
Size

1.2MB
Sample

231222-r7xwaadecq
MD5

882d4e04990549255d8583c5dc654bfe
SHA1

7101a351e5965f30b434997ca7873bd0a116bf6c
SHA256

6b6b90288f74c08faf4d42b41303fcf607e3132a198ae1c894d9de187b6dc9fd
SHA512

218361f7d048b1eb13189cebb872058bea7204ec3f1b3133f06a5f133ca31614e8a8c5a20abdae95fcf5abcf9f5a17e9d311854d76a37ecfbb05537260144d4e
SSDEEP

24576:I99B275YAKEF+tS5ArDZRUgYLatuCSQf:Il27GAK/tlRtYLat

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  6b6b90288f74c08faf4d42b41303fcf607e3132a198ae1c894d9de187b6dc9fd
- Size
  
  1.2MB
- MD5
  
  882d4e04990549255d8583c5dc654bfe
- SHA1
  
  7101a351e5965f30b434997ca7873bd0a116bf6c
- SHA256
  
  6b6b90288f74c08faf4d42b41303fcf607e3132a198ae1c894d9de187b6dc9fd
- SHA512
  
  218361f7d048b1eb13189cebb872058bea7204ec3f1b3133f06a5f133ca31614e8a8c5a20abdae95fcf5abcf9f5a17e9d311854d76a37ecfbb05537260144d4e
- SSDEEP
  
  24576:I99B275YAKEF+tS5ArDZRUgYLatuCSQf:Il27GAK/tlRtYLat
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2