97539bae16c899ba24a6ac254587e823d6f7dac758d5c5d733d1ccbf7e2b028a | Triage

Sharing

General

Target

38e8ee7b986dfc616a562802f7af6fae
Size

57KB
Sample

231231-q9zbfsbeg5
MD5

38e8ee7b986dfc616a562802f7af6fae
SHA1

f6d351bcf978011333dfa4c6586c70d66d5fedf0
SHA256

97539bae16c899ba24a6ac254587e823d6f7dac758d5c5d733d1ccbf7e2b028a
SHA512

35e2ce7cbdb46d1fea0ff3031dbbec5d408af1e10027286258767e46a9e6190684f9e8a56e5f675aee932805d947762f313a2061576a2dbcdbf88589d59c5af2
SSDEEP

1536:UCAqdl3NxOhS5SgKe0jlC6sWkm6Py0kM0/kNgK:H35SgKe0xp/k6K

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  38e8ee7b986dfc616a562802f7af6fae
- Size
  
  57KB
- MD5
  
  38e8ee7b986dfc616a562802f7af6fae
- SHA1
  
  f6d351bcf978011333dfa4c6586c70d66d5fedf0
- SHA256
  
  97539bae16c899ba24a6ac254587e823d6f7dac758d5c5d733d1ccbf7e2b028a
- SHA512
  
  35e2ce7cbdb46d1fea0ff3031dbbec5d408af1e10027286258767e46a9e6190684f9e8a56e5f675aee932805d947762f313a2061576a2dbcdbf88589d59c5af2
- SSDEEP
  
  1536:UCAqdl3NxOhS5SgKe0jlC6sWkm6Py0kM0/kNgK:H35SgKe0xp/k6K
Score

7^/10

spyware stealer
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2