9bc183aa3445079b902951db89270b58050bd5c105246aca99cd9397c8269de8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bc183aa3445079b902951db89270b58050bd5c105246aca99cd9397c8269de8
Size

2KB
Sample

240202-136gashbb5
MD5

4c560521f3cd8ce88ab1026e8d7159eb
SHA1

594b810cb9ca6c04c468b7b93a66553f3a164acd
SHA256

9bc183aa3445079b902951db89270b58050bd5c105246aca99cd9397c8269de8
SHA512

12f0759082fdac9f258491b2533251ad5750263708c682bc957d4c2c1f40f7bfa9f6c3c95baac95c6255c2e3f128e0505ae25b9401264efca2b875922783a0cc

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  9bc183aa3445079b902951db89270b58050bd5c105246aca99cd9397c8269de8
- Size
  
  2KB
- MD5
  
  4c560521f3cd8ce88ab1026e8d7159eb
- SHA1
  
  594b810cb9ca6c04c468b7b93a66553f3a164acd
- SHA256
  
  9bc183aa3445079b902951db89270b58050bd5c105246aca99cd9397c8269de8
- SHA512
  
  12f0759082fdac9f258491b2533251ad5750263708c682bc957d4c2c1f40f7bfa9f6c3c95baac95c6255c2e3f128e0505ae25b9401264efca2b875922783a0cc
Score

7^/10

persistence spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer