63843f79934fd93fdd9bd572888f753ebea81c569812ba824376add2280837b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

231a343831ff5f7c300247441b973aae
Size

996KB
Sample

231231-b3nh2sfdfn
MD5

231a343831ff5f7c300247441b973aae
SHA1

d12ab4da1d8caa40549dc0208510ad2d05c73c50
SHA256

63843f79934fd93fdd9bd572888f753ebea81c569812ba824376add2280837b4
SHA512

094fb456fbacf5c11bf675cc6a9b9f3a4ba670b9eb5d565cf98bacf5086a50eaf0ce77dd33ae15fc31d71fb2cc9efed64a425ddb37fe3659dad9f0a589177491
SSDEEP

24576:T95sjkZczo63M87oYbJd5A8uvK0vK8QL5HPf4xVv55:TfsloTYBbSDvK0vKPtvgxVvf

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  231a343831ff5f7c300247441b973aae
- Size
  
  996KB
- MD5
  
  231a343831ff5f7c300247441b973aae
- SHA1
  
  d12ab4da1d8caa40549dc0208510ad2d05c73c50
- SHA256
  
  63843f79934fd93fdd9bd572888f753ebea81c569812ba824376add2280837b4
- SHA512
  
  094fb456fbacf5c11bf675cc6a9b9f3a4ba670b9eb5d565cf98bacf5086a50eaf0ce77dd33ae15fc31d71fb2cc9efed64a425ddb37fe3659dad9f0a589177491
- SSDEEP
  
  24576:T95sjkZczo63M87oYbJd5A8uvK0vK8QL5HPf4xVv55:TfsloTYBbSDvK0vKPtvgxVvf
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2