51bf1c26a7c4399f934eb60a16067ecde71a2a86e03a2fd3ca6daae214dd96d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0663ec42e79093f48898f2560695b18c
Size

990KB
Sample

231225-fkkrnabbam
MD5

0663ec42e79093f48898f2560695b18c
SHA1

c9a452a6c359908775a2b7dd00a33f549c5aa7e0
SHA256

51bf1c26a7c4399f934eb60a16067ecde71a2a86e03a2fd3ca6daae214dd96d5
SHA512

e3f13ae035f6936ff70b58aeb829648fc6ccaa1c564d6d878ec442e9528f796b07680f4cf7a57da2df22e7155d076ec2ede87082644e41ac4496d8341eadf0fa
SSDEEP

24576:i5sjkZcf3Eo63487oYbJd5A8uvKzS4MvKCINHPf4xVE5:csR3EoxYBbSDvKz0vKCINvgxVE5

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  0663ec42e79093f48898f2560695b18c
- Size
  
  990KB
- MD5
  
  0663ec42e79093f48898f2560695b18c
- SHA1
  
  c9a452a6c359908775a2b7dd00a33f549c5aa7e0
- SHA256
  
  51bf1c26a7c4399f934eb60a16067ecde71a2a86e03a2fd3ca6daae214dd96d5
- SHA512
  
  e3f13ae035f6936ff70b58aeb829648fc6ccaa1c564d6d878ec442e9528f796b07680f4cf7a57da2df22e7155d076ec2ede87082644e41ac4496d8341eadf0fa
- SSDEEP
  
  24576:i5sjkZcf3Eo63487oYbJd5A8uvKzS4MvKCINHPf4xVE5:csR3EoxYBbSDvKz0vKCINvgxVE5
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2