570031329fa9389362823bb563f1503431931921cee787ac61e07acfa3285b26 | Triage

Sharing

General

Target

2b0e50ef2ef7c139995e5b15b2e99958
Size

880KB
Sample

231231-gr3rgsdef5
MD5

2b0e50ef2ef7c139995e5b15b2e99958
SHA1

c04153b4131f406db60c277621d7d7c60b239ebb
SHA256

570031329fa9389362823bb563f1503431931921cee787ac61e07acfa3285b26
SHA512

d368af81a9e50b97c78f2a086d56a21e04e97672f0c379dc516c8d0e36ca034886264d710d861be1103ab868290eb2162a8f50583bacffe5864cea7fe5e21066
SSDEEP

24576:eYUp8WDlv+glws82dl+iTCfK2qoNy1kKYUaM:erp8Whv/istdlfTCyPoNynOM

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2b0e50ef2ef7c139995e5b15b2e99958
- Size
  
  880KB
- MD5
  
  2b0e50ef2ef7c139995e5b15b2e99958
- SHA1
  
  c04153b4131f406db60c277621d7d7c60b239ebb
- SHA256
  
  570031329fa9389362823bb563f1503431931921cee787ac61e07acfa3285b26
- SHA512
  
  d368af81a9e50b97c78f2a086d56a21e04e97672f0c379dc516c8d0e36ca034886264d710d861be1103ab868290eb2162a8f50583bacffe5864cea7fe5e21066
- SSDEEP
  
  24576:eYUp8WDlv+glws82dl+iTCfK2qoNy1kKYUaM:erp8Whv/istdlfTCyPoNynOM
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2