9dd7fcc90649c62996930a699987f86868bdbbf8c8000bacbc1db5f274480f63 | Triage

Sharing

General

Target

9dd7fcc90649c62996930a699987f86868bdbbf8c8000bacbc1db5f274480f63
Size

1.8MB
Sample

231225-hbb49sefer
MD5

be222d15a3305c0b9280ded87e4a4bab
SHA1

2bfe9e7591e778e281178b5139878f71cdad5b56
SHA256

9dd7fcc90649c62996930a699987f86868bdbbf8c8000bacbc1db5f274480f63
SHA512

acbcb1be2a75796391eaa28a588447ec8b40fc8aa67eb6c6c8bbe4a2a813368f1e995175710e776d6176a1202c8f1618dd1221846ea34736aa594730338e691f
SSDEEP

49152:7x5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAxCks7R9L58UqFJjskU:7vbjVkjjCAzJ4C17DVqFJU

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  9dd7fcc90649c62996930a699987f86868bdbbf8c8000bacbc1db5f274480f63
- Size
  
  1.8MB
- MD5
  
  be222d15a3305c0b9280ded87e4a4bab
- SHA1
  
  2bfe9e7591e778e281178b5139878f71cdad5b56
- SHA256
  
  9dd7fcc90649c62996930a699987f86868bdbbf8c8000bacbc1db5f274480f63
- SHA512
  
  acbcb1be2a75796391eaa28a588447ec8b40fc8aa67eb6c6c8bbe4a2a813368f1e995175710e776d6176a1202c8f1618dd1221846ea34736aa594730338e691f
- SSDEEP
  
  49152:7x5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAxCks7R9L58UqFJjskU:7vbjVkjjCAzJ4C17DVqFJU
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2