61b87a334d8ba44ca9fcd1aa0f77268cc45026da666b03b31697323192871849 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

263e9bacaf824ba82bb1c580f291acac
Size

868KB
Sample

231225-r1c8asahhn
MD5

263e9bacaf824ba82bb1c580f291acac
SHA1

9f3571e4079ae8d4366d8417119a4f46411ee184
SHA256

61b87a334d8ba44ca9fcd1aa0f77268cc45026da666b03b31697323192871849
SHA512

07a61adbe39a61da10b1a8e5e3528d480317bd1cfa1145563430fdb0ae894d033a4aac22319c8026514e02ef31eb2ebe7d82bd65880accfa7bbf1d35cbd1d38d
SSDEEP

24576:Amp8WDlv+glwsN2dKFbJd2+fK2qmUL1kKY2ag:pp8Whv/isEdKFr2+yPmULnUg

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  263e9bacaf824ba82bb1c580f291acac
- Size
  
  868KB
- MD5
  
  263e9bacaf824ba82bb1c580f291acac
- SHA1
  
  9f3571e4079ae8d4366d8417119a4f46411ee184
- SHA256
  
  61b87a334d8ba44ca9fcd1aa0f77268cc45026da666b03b31697323192871849
- SHA512
  
  07a61adbe39a61da10b1a8e5e3528d480317bd1cfa1145563430fdb0ae894d033a4aac22319c8026514e02ef31eb2ebe7d82bd65880accfa7bbf1d35cbd1d38d
- SSDEEP
  
  24576:Amp8WDlv+glwsN2dKFbJd2+fK2qmUL1kKY2ag:pp8Whv/isEdKFr2+yPmULnUg
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2