6f78d40339d586067d8686c081ba64d7ec661f57eb6c9e2f1faf3bee8c32d2c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a5f4a6c84d4ac139943ae3b0aca0e27
Size

1.1MB
Sample

231226-nftsrsdbg7
MD5

6a5f4a6c84d4ac139943ae3b0aca0e27
SHA1

00a525c16277b953de0ff8230ae00556a18ec9e5
SHA256

6f78d40339d586067d8686c081ba64d7ec661f57eb6c9e2f1faf3bee8c32d2c3
SHA512

e0d5a53c2c913fcb58413c46f51bbf6e645155c4e79253ee9c37e42ff085aeaa89eaa447821cc92c0704ba00e3f8e72391290b54e4dfc7b48f2a12ae1a7e4266
SSDEEP

24576:k4oKmf5R/pOCuxGU13IlBwaa6NKHb/J/mLLk+:k4uv/pOCIGk3Ivwaa6IHzB

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  6a5f4a6c84d4ac139943ae3b0aca0e27
- Size
  
  1.1MB
- MD5
  
  6a5f4a6c84d4ac139943ae3b0aca0e27
- SHA1
  
  00a525c16277b953de0ff8230ae00556a18ec9e5
- SHA256
  
  6f78d40339d586067d8686c081ba64d7ec661f57eb6c9e2f1faf3bee8c32d2c3
- SHA512
  
  e0d5a53c2c913fcb58413c46f51bbf6e645155c4e79253ee9c37e42ff085aeaa89eaa447821cc92c0704ba00e3f8e72391290b54e4dfc7b48f2a12ae1a7e4266
- SSDEEP
  
  24576:k4oKmf5R/pOCuxGU13IlBwaa6NKHb/J/mLLk+:k4uv/pOCIGk3Ivwaa6IHzB
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2