c7f577cefa301fea0c4819768680b4750bdc67a55e04a766a6d94a190bb9e9e1 | Triage

Sharing

General

Target

c7f577cefa301fea0c4819768680b4750bdc67a55e04a766a6d94a190bb9e9e1
Size

1.4MB
Sample

231229-eq5tcafef6
MD5

6b388b92a6129fde94255cfd203da7a3
SHA1

e59b69bfceff5ce28cc6f434f89c735f34c10d82
SHA256

c7f577cefa301fea0c4819768680b4750bdc67a55e04a766a6d94a190bb9e9e1
SHA512

fb5434593ce021dbb800c0fa380297b0da6ceff690590721eb47d5021b08334b20e2ddad244a5e522d9007b1ba6371e6e085719c8046c6ac507b8aa8b8bf305a
SSDEEP

12288:OO9B+VY8quMPLjg4YqLgvB6dMSJ3oecwJE97O8k4QrsdJW3kFk9huIFYPSbwL:OO9BeqtL+SgvqFE1d3ddJW3CAqPSbwL

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  c7f577cefa301fea0c4819768680b4750bdc67a55e04a766a6d94a190bb9e9e1
- Size
  
  1.4MB
- MD5
  
  6b388b92a6129fde94255cfd203da7a3
- SHA1
  
  e59b69bfceff5ce28cc6f434f89c735f34c10d82
- SHA256
  
  c7f577cefa301fea0c4819768680b4750bdc67a55e04a766a6d94a190bb9e9e1
- SHA512
  
  fb5434593ce021dbb800c0fa380297b0da6ceff690590721eb47d5021b08334b20e2ddad244a5e522d9007b1ba6371e6e085719c8046c6ac507b8aa8b8bf305a
- SSDEEP
  
  12288:OO9B+VY8quMPLjg4YqLgvB6dMSJ3oecwJE97O8k4QrsdJW3kFk9huIFYPSbwL:OO9BeqtL+SgvqFE1d3ddJW3CAqPSbwL
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2