ae7dbd2586471669127e85f994e87b628876aac2b5f7a33738c82dc7cd4fb8b1 | Triage

Sharing

General

Target

86552866d14bb032a92d3d80b7b31929
Size

878KB
Sample

240201-jnvb2sgghn
MD5

86552866d14bb032a92d3d80b7b31929
SHA1

66b9006323c3ada3851468bace5c1e0df7dc0b31
SHA256

ae7dbd2586471669127e85f994e87b628876aac2b5f7a33738c82dc7cd4fb8b1
SHA512

27c2eab6cdeb98e314e00a5e4216c1da010f9f2692153b662a04a224c937867ee1150f0ee4b3cbc3f8be313546923020970101b84ed6a6ba5b6829aafda23a27
SSDEEP

24576:e3pRurPdW79gz4ptp/zLzuBDWTS3pTik2q:e3pRWy3pPzmhZTik2

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  86552866d14bb032a92d3d80b7b31929
- Size
  
  878KB
- MD5
  
  86552866d14bb032a92d3d80b7b31929
- SHA1
  
  66b9006323c3ada3851468bace5c1e0df7dc0b31
- SHA256
  
  ae7dbd2586471669127e85f994e87b628876aac2b5f7a33738c82dc7cd4fb8b1
- SHA512
  
  27c2eab6cdeb98e314e00a5e4216c1da010f9f2692153b662a04a224c937867ee1150f0ee4b3cbc3f8be313546923020970101b84ed6a6ba5b6829aafda23a27
- SSDEEP
  
  24576:e3pRurPdW79gz4ptp/zLzuBDWTS3pTik2q:e3pRWy3pPzmhZTik2
Score

7^/10

persistence spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer