593df76ca0273aa380aa50b84df8fb0a075648f3712dcb336b977f3cceaffb0a | Triage

Sharing

General

Target

2a788df7324700729a74b9ab8205aa18
Size

130KB
Sample

231231-get9ksgcdk
MD5

2a788df7324700729a74b9ab8205aa18
SHA1

477c4caa91fe5e707a4e5695504733572c30e5b1
SHA256

593df76ca0273aa380aa50b84df8fb0a075648f3712dcb336b977f3cceaffb0a
SHA512

5e4a6b25b2fa22a114828c1dfc51c0c575af4b851e0da23e2894a0b8c02eb0a5cba98ca05e95519253990a1296a198f280c7b58411cef5c294c5114ab757c399
SSDEEP

3072:sFSoIkkXuqYfXG5AJg4/SAEZBiBx/1BFNI5wsdaechMcGIeq5i:sF9IkkkfwA3SZZBiBx9XNjsdaecmMD

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  2a788df7324700729a74b9ab8205aa18
- Size
  
  130KB
- MD5
  
  2a788df7324700729a74b9ab8205aa18
- SHA1
  
  477c4caa91fe5e707a4e5695504733572c30e5b1
- SHA256
  
  593df76ca0273aa380aa50b84df8fb0a075648f3712dcb336b977f3cceaffb0a
- SHA512
  
  5e4a6b25b2fa22a114828c1dfc51c0c575af4b851e0da23e2894a0b8c02eb0a5cba98ca05e95519253990a1296a198f280c7b58411cef5c294c5114ab757c399
- SSDEEP
  
  3072:sFSoIkkXuqYfXG5AJg4/SAEZBiBx/1BFNI5wsdaechMcGIeq5i:sF9IkkkfwA3SZZBiBx9XNjsdaecmMD
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer