7b1bbf9c5e511cf8b98e2368ed1236d293dc78caf1c466e240198813c3840541 | Triage

Sharing

General

Target

7b1bbf9c5e511cf8b98e2368ed1236d293dc78caf1c466e240198813c3840541
Size

706KB
Sample

240127-ybs1saafc5
MD5

a5ce9488bcdc2f3104f3fbe577e45d47
SHA1

2a74176401ce52d9d989de666e9f5860d7253f6f
SHA256

7b1bbf9c5e511cf8b98e2368ed1236d293dc78caf1c466e240198813c3840541
SHA512

544e71e41822012638ccd1ae0fed78ebc596ea56d9a27ffafe3543b633ae723bb50e2c8436f4b4d5bcb9e09d33379d75e06c5fd34d37edbbd853d6343d8c62b1
SSDEEP

12288:ZoiB+tzwdDJ1KyU9yRsFglG3M/BdDCRohP5JUkT9STXFXlgDlGrcpxhTEt:ZoiB3J1h7sgAMKSW49STXFXSxhTE

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  7b1bbf9c5e511cf8b98e2368ed1236d293dc78caf1c466e240198813c3840541
- Size
  
  706KB
- MD5
  
  a5ce9488bcdc2f3104f3fbe577e45d47
- SHA1
  
  2a74176401ce52d9d989de666e9f5860d7253f6f
- SHA256
  
  7b1bbf9c5e511cf8b98e2368ed1236d293dc78caf1c466e240198813c3840541
- SHA512
  
  544e71e41822012638ccd1ae0fed78ebc596ea56d9a27ffafe3543b633ae723bb50e2c8436f4b4d5bcb9e09d33379d75e06c5fd34d37edbbd853d6343d8c62b1
- SSDEEP
  
  12288:ZoiB+tzwdDJ1KyU9yRsFglG3M/BdDCRohP5JUkT9STXFXlgDlGrcpxhTEt:ZoiB3J1h7sgAMKSW49STXFXSxhTE
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2