7019fee3f5f3839fac98792df9c74d396821746688eec23197eb92520f503446 | Triage

Sharing

General

Target

4c04bd1f1b7ee9c153b07a7328ba087d
Size

1.6MB
Sample

231226-cpqa6afghl
MD5

4c04bd1f1b7ee9c153b07a7328ba087d
SHA1

fdf87dee3999d2c1472ac430890a1f71bf224606
SHA256

7019fee3f5f3839fac98792df9c74d396821746688eec23197eb92520f503446
SHA512

a4da4637935bc21abdfff1a0d5624ba39cb94b9d960c873081e03e849693a00cfe49f12fc8a6160a6f55e61eb1698553474bbe0cc12b3ab27dea0fa1d9be7737
SSDEEP

49152:x/fwUdoP8/QnXQLqs4CEgHhAWkf6tvk4TXbr7:xwUdd/0ALq+O6tc4

Score

7^/10

evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  4c04bd1f1b7ee9c153b07a7328ba087d
- Size
  
  1.6MB
- MD5
  
  4c04bd1f1b7ee9c153b07a7328ba087d
- SHA1
  
  fdf87dee3999d2c1472ac430890a1f71bf224606
- SHA256
  
  7019fee3f5f3839fac98792df9c74d396821746688eec23197eb92520f503446
- SHA512
  
  a4da4637935bc21abdfff1a0d5624ba39cb94b9d960c873081e03e849693a00cfe49f12fc8a6160a6f55e61eb1698553474bbe0cc12b3ab27dea0fa1d9be7737
- SSDEEP
  
  49152:x/fwUdoP8/QnXQLqs4CEgHhAWkf6tvk4TXbr7:xwUdd/0ALq+O6tc4
Score

7^/10

evasion spyware stealer trojan
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionspywarestealertrojan

behavioral2