ea1e39d0b402495b829ab7ce68472e31107f011c7b7e45bb3d13460dc6c957d8 | Triage

Sharing

General

Target

243b8405591a802effda2dd8fdea721b
Size

436KB
Sample

231231-cq2etadhbq
MD5

243b8405591a802effda2dd8fdea721b
SHA1

f8e24757032c1dca93bbbc439b9e425ea2466692
SHA256

ea1e39d0b402495b829ab7ce68472e31107f011c7b7e45bb3d13460dc6c957d8
SHA512

b9a1b64609fe178f2228285c0ebc2b9c22f2a2cc155dd700954a134de67f74e01351d8784957c3cb358d23df1ee131b7c08f06b658d3a576771afb239570a135
SSDEEP

12288:SeZL60a7gr6KJ525uSHIJVuE+YqYjffK0jRuKJM0r/0QGl:JZLBrjJ5chgF8YzS2j07l

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  243b8405591a802effda2dd8fdea721b
- Size
  
  436KB
- MD5
  
  243b8405591a802effda2dd8fdea721b
- SHA1
  
  f8e24757032c1dca93bbbc439b9e425ea2466692
- SHA256
  
  ea1e39d0b402495b829ab7ce68472e31107f011c7b7e45bb3d13460dc6c957d8
- SHA512
  
  b9a1b64609fe178f2228285c0ebc2b9c22f2a2cc155dd700954a134de67f74e01351d8784957c3cb358d23df1ee131b7c08f06b658d3a576771afb239570a135
- SSDEEP
  
  12288:SeZL60a7gr6KJ525uSHIJVuE+YqYjffK0jRuKJM0r/0QGl:JZLBrjJ5chgF8YzS2j07l
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2