d8351d4fac2edd255b0108a183f027e064be150c52942415fada5e5390404c7d | Triage

Sharing

General

Target

d8351d4fac2edd255b0108a183f027e064be150c52942415fada5e5390404c7d
Size

1.8MB
Sample

240103-nytwgsfdh3
MD5

ca4e3f2d05c961648bd8c55704a0ff28
SHA1

0c301c2f3a3bc7c22f7286ff6b12641217775337
SHA256

d8351d4fac2edd255b0108a183f027e064be150c52942415fada5e5390404c7d
SHA512

b4329c2c0a929b14e72e7b19445b3f86b9020575d6b18760580dc25582c1c6040b41ea053c5402dd67934ea40018d6bc22c2d78c6b53eaa43483ce2e59216cba
SSDEEP

49152:sx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAvErvL73RLSo+2fhl:svbjVkjjCAzJRrvvRe12fD

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  d8351d4fac2edd255b0108a183f027e064be150c52942415fada5e5390404c7d
- Size
  
  1.8MB
- MD5
  
  ca4e3f2d05c961648bd8c55704a0ff28
- SHA1
  
  0c301c2f3a3bc7c22f7286ff6b12641217775337
- SHA256
  
  d8351d4fac2edd255b0108a183f027e064be150c52942415fada5e5390404c7d
- SHA512
  
  b4329c2c0a929b14e72e7b19445b3f86b9020575d6b18760580dc25582c1c6040b41ea053c5402dd67934ea40018d6bc22c2d78c6b53eaa43483ce2e59216cba
- SSDEEP
  
  49152:sx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAvErvL73RLSo+2fhl:svbjVkjjCAzJRrvvRe12fD
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2