0c1ddda0f5819ac85497de5400bcfb34474e3d7cd028d043525171cefef256b3 | Triage

Sharing

General

Target

21f811f9863e63d2e1a7e9942eea40b8
Size

2.3MB
Sample

231231-ayxeqagcan
MD5

21f811f9863e63d2e1a7e9942eea40b8
SHA1

983ba2140521e049615e72c3e7d9d8702f214d83
SHA256

0c1ddda0f5819ac85497de5400bcfb34474e3d7cd028d043525171cefef256b3
SHA512

1ee9789aad428998d2e8c49b69ddf4e94eb6705a555947077fab1cfd56653af47cc726ff920a84b3dfebf6c1641191438b79e1829b156f95e7993acdd48f335c
SSDEEP

49152:UM7DPU7Ku2ocLnbdq6alDLcWLDg3/UnCcxQO8NUQWWxwct1yTnlQT:UVN2DLilMheL5QWWxwct1I2

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  21f811f9863e63d2e1a7e9942eea40b8
- Size
  
  2.3MB
- MD5
  
  21f811f9863e63d2e1a7e9942eea40b8
- SHA1
  
  983ba2140521e049615e72c3e7d9d8702f214d83
- SHA256
  
  0c1ddda0f5819ac85497de5400bcfb34474e3d7cd028d043525171cefef256b3
- SHA512
  
  1ee9789aad428998d2e8c49b69ddf4e94eb6705a555947077fab1cfd56653af47cc726ff920a84b3dfebf6c1641191438b79e1829b156f95e7993acdd48f335c
- SSDEEP
  
  49152:UM7DPU7Ku2ocLnbdq6alDLcWLDg3/UnCcxQO8NUQWWxwct1yTnlQT:UVN2DLilMheL5QWWxwct1I2
Score

7^/10

spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2