7d5bdd7e7bf808c6e0f70796a19afd4a7b25ce943cc724d6ad3efd0db7738908 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

028492fc335c13faa874be9006a897aa
Size

216KB
Sample

231224-sbaljsaegj
MD5

028492fc335c13faa874be9006a897aa
SHA1

a6943ad381439c628c156fa1b14dd6bb3679d42e
SHA256

7d5bdd7e7bf808c6e0f70796a19afd4a7b25ce943cc724d6ad3efd0db7738908
SHA512

13d3c3161bbd6c32aa2f661584fddb4d23e3ee493225d07351d36e0aa663463acd775081b69cb0bff4ca0bfbfb130bea944ed3e3b02d050ddb2a9bf9dbd100aa
SSDEEP

3072:uGNu08lhIDSwT+An/KPi7LLZDJhYjdp8/1/W6rr1:uGU0xDvboCLdDJhAr8N/Dr1

Score

7^/10

discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  028492fc335c13faa874be9006a897aa
- Size
  
  216KB
- MD5
  
  028492fc335c13faa874be9006a897aa
- SHA1
  
  a6943ad381439c628c156fa1b14dd6bb3679d42e
- SHA256
  
  7d5bdd7e7bf808c6e0f70796a19afd4a7b25ce943cc724d6ad3efd0db7738908
- SHA512
  
  13d3c3161bbd6c32aa2f661584fddb4d23e3ee493225d07351d36e0aa663463acd775081b69cb0bff4ca0bfbfb130bea944ed3e3b02d050ddb2a9bf9dbd100aa
- SSDEEP
  
  3072:uGNu08lhIDSwT+An/KPi7LLZDJhYjdp8/1/W6rr1:uGU0xDvboCLdDJhAr8N/Dr1
Score

7^/10

discovery persistence spyware stealer
- Deletes itself
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealer

behavioral2

discoverypersistencespywarestealer