318b21423daa09cf973520c78d7c770d04817302bfd8b1f79393f7f42904970a | Triage

Sharing

General

Target

318b21423daa09cf973520c78d7c770d04817302bfd8b1f79393f7f42904970a
Size

1.8MB
Sample

240128-sy5p7scfa8
MD5

5c0701e1e660047d8e45b074994b751a
SHA1

b981d2c77bf530c4b79051d577d6927d7ece3840
SHA256

318b21423daa09cf973520c78d7c770d04817302bfd8b1f79393f7f42904970a
SHA512

4c877dd1c32f58b6907f4a7cd4466ed7e885987936f2f8f8cefefed91a4773912e470d2f5999aff2f785b34c49d4c18444c682e390c8d78504f5a0e37fddf3eb
SSDEEP

49152:kKJ0WR7AFPyyiSruXKpk3WFDL9zxnSu/snji6attJM:kKlBAFPydSS6W6X9lnpEnW6at

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  318b21423daa09cf973520c78d7c770d04817302bfd8b1f79393f7f42904970a
- Size
  
  1.8MB
- MD5
  
  5c0701e1e660047d8e45b074994b751a
- SHA1
  
  b981d2c77bf530c4b79051d577d6927d7ece3840
- SHA256
  
  318b21423daa09cf973520c78d7c770d04817302bfd8b1f79393f7f42904970a
- SHA512
  
  4c877dd1c32f58b6907f4a7cd4466ed7e885987936f2f8f8cefefed91a4773912e470d2f5999aff2f785b34c49d4c18444c682e390c8d78504f5a0e37fddf3eb
- SSDEEP
  
  49152:kKJ0WR7AFPyyiSruXKpk3WFDL9zxnSu/snji6attJM:kKlBAFPydSS6W6X9lnpEnW6at
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2