672cb887b64a007e4e7cd98d429960d15474328ff1b8369e0d98c65874eddc6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

091557d8f6e51a4079b52880c8313e0c
Size

6.6MB
Sample

231225-gf4veahcbr
MD5

091557d8f6e51a4079b52880c8313e0c
SHA1

9eb61812dbc7713ab6f55633f1291da05ff7f0b3
SHA256

672cb887b64a007e4e7cd98d429960d15474328ff1b8369e0d98c65874eddc6d
SHA512

6c9ef13dd8695b4c409e707f4842e68650fb253dd62ccc41cf7b1d721c66f7676fd9f34cc5b5435991993e2352d3ffdc634c137c15742b8456c01e73b87bb50d
SSDEEP

196608:SYC4PmCsXDjDyf6L2WliXYrHW1LHMmpe:g4PmCEDVL2ciIrHWRHMg

Score

7^/10

pyinstaller spyware stealer

Malware Config

Targets

- Target
  
  091557d8f6e51a4079b52880c8313e0c
- Size
  
  6.6MB
- MD5
  
  091557d8f6e51a4079b52880c8313e0c
- SHA1
  
  9eb61812dbc7713ab6f55633f1291da05ff7f0b3
- SHA256
  
  672cb887b64a007e4e7cd98d429960d15474328ff1b8369e0d98c65874eddc6d
- SHA512
  
  6c9ef13dd8695b4c409e707f4842e68650fb253dd62ccc41cf7b1d721c66f7676fd9f34cc5b5435991993e2352d3ffdc634c137c15742b8456c01e73b87bb50d
- SSDEEP
  
  196608:SYC4PmCsXDjDyf6L2WliXYrHW1LHMmpe:g4PmCEDVL2ciIrHWRHMg
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2