9435c3d918d9baeab4373af62ae3554a7e49069a0cdc6aedad1780e346fba3ec | Triage

Sharing

General

Target

9435c3d918d9baeab4373af62ae3554a7e49069a0cdc6aedad1780e346fba3ec
Size

1.3MB
Sample

240124-rwjjhscfdp
MD5

2be9620604163b74270bdf4266149e35
SHA1

3fcdeb606184bcfe523e87c95a46c01ba9b26148
SHA256

9435c3d918d9baeab4373af62ae3554a7e49069a0cdc6aedad1780e346fba3ec
SHA512

120b3c3234ad67ae62fd62f6fb7512347c3fcb993d41911794cb3bc1fda430e8cdab298d186a538c25a2d829b6a76ce16518861fb9ac988cf8604091aa7e5030
SSDEEP

12288:FO9B+VWGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:FO9B8t/sBlDqgZQd6XKtiMJYiPU

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  9435c3d918d9baeab4373af62ae3554a7e49069a0cdc6aedad1780e346fba3ec
- Size
  
  1.3MB
- MD5
  
  2be9620604163b74270bdf4266149e35
- SHA1
  
  3fcdeb606184bcfe523e87c95a46c01ba9b26148
- SHA256
  
  9435c3d918d9baeab4373af62ae3554a7e49069a0cdc6aedad1780e346fba3ec
- SHA512
  
  120b3c3234ad67ae62fd62f6fb7512347c3fcb993d41911794cb3bc1fda430e8cdab298d186a538c25a2d829b6a76ce16518861fb9ac988cf8604091aa7e5030
- SSDEEP
  
  12288:FO9B+VWGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:FO9B8t/sBlDqgZQd6XKtiMJYiPU
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2