b5ea244c11f1e0e5362548219fc8c8346dffeb2660bb14d5aadd5b80c0a9da8d | Triage

Sharing

General

Target

7aab2e101788cc646fbb4aec3c6e62da
Size

7.6MB
Sample

240127-tfqzrshbcr
MD5

7aab2e101788cc646fbb4aec3c6e62da
SHA1

22cad396e9b6916203cd144a697edbbb75018431
SHA256

b5ea244c11f1e0e5362548219fc8c8346dffeb2660bb14d5aadd5b80c0a9da8d
SHA512

91a0ce84852864e894bda62674e79fb692de119f39539400ed054665f459895aca12d3ca1cde944909a9edf15fdf18a82bf66d791567c13cbd2249d8cd0116f8
SSDEEP

196608:eZgf60JnP1EYNLGwSzqJ4dUEEyFKKYA/YeVI:eZgBJP1Ecwn5ElURVI

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  7aab2e101788cc646fbb4aec3c6e62da
- Size
  
  7.6MB
- MD5
  
  7aab2e101788cc646fbb4aec3c6e62da
- SHA1
  
  22cad396e9b6916203cd144a697edbbb75018431
- SHA256
  
  b5ea244c11f1e0e5362548219fc8c8346dffeb2660bb14d5aadd5b80c0a9da8d
- SHA512
  
  91a0ce84852864e894bda62674e79fb692de119f39539400ed054665f459895aca12d3ca1cde944909a9edf15fdf18a82bf66d791567c13cbd2249d8cd0116f8
- SSDEEP
  
  196608:eZgf60JnP1EYNLGwSzqJ4dUEEyFKKYA/YeVI:eZgBJP1Ecwn5ElURVI
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2