bb5a9d6418509a04633788d4c9afdb3b3e78f23907565bcdf80e65dd79c1fe79 | Triage

Sharing

General

Target

14c87d8e079bba8933dd6daa4b118803
Size

1018KB
Sample

231224-137dlabbbp
MD5

14c87d8e079bba8933dd6daa4b118803
SHA1

6efc80e872ece113a011fb2f7dab2e4cc272fd7c
SHA256

bb5a9d6418509a04633788d4c9afdb3b3e78f23907565bcdf80e65dd79c1fe79
SHA512

2f4473dfefa9e351c69e76688448079b5b02bdf53ad45b881450686b43d8d913ced9309117e1ca36262716608d218a7b30b326d50bc238869c033d6923df227e
SSDEEP

24576:An0TX1hQfJuu5x8/elO3gs8ZG8aljjAFF:u0TX1efJug8OO388jAr

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  14c87d8e079bba8933dd6daa4b118803
- Size
  
  1018KB
- MD5
  
  14c87d8e079bba8933dd6daa4b118803
- SHA1
  
  6efc80e872ece113a011fb2f7dab2e4cc272fd7c
- SHA256
  
  bb5a9d6418509a04633788d4c9afdb3b3e78f23907565bcdf80e65dd79c1fe79
- SHA512
  
  2f4473dfefa9e351c69e76688448079b5b02bdf53ad45b881450686b43d8d913ced9309117e1ca36262716608d218a7b30b326d50bc238869c033d6923df227e
- SSDEEP
  
  24576:An0TX1hQfJuu5x8/elO3gs8ZG8aljjAFF:u0TX1efJug8OO388jAr
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer