548656e1dcdbb99e00722ae657a32819dde941f667049c0fcde5db33cfb3405f | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14-02-2024 02:30

Sharing

Report Analysis Logs

General

Target

97aacf853d7ecc2c8ced35c267bfa96f.exe
Size

1.4MB
MD5

97aacf853d7ecc2c8ced35c267bfa96f
SHA1

67580d88c8b588cf48fe293272c79236b8e440e2
SHA256

548656e1dcdbb99e00722ae657a32819dde941f667049c0fcde5db33cfb3405f
SHA512

899c72c280f1f936e232d88ef99c0536e1d24eb92feb10fb6bc1f8f2db77d22dbdc5fdef7254db234723e4a40f864d222a33aa3b64e8614d39b9019d8c3a7a81
SSDEEP

24576:YkOmy8JueJbFZsbPSj9xTLIC+pwjVzatU2SkFSnHJuDGWmaDtnKxJoBsjJCUhzPD:YkOmy8JuetAbPSj9xIrYptWHTbUhzblt

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of local email clients 2 TTPs
Email clients store some user data on disk where infostealers will often target it.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

C:\Users\Admin\AppData\Local\Temp\97aacf853d7ecc2c8ced35c267bfa96f.exe
"C:\Users\Admin\AppData\Local\Temp\97aacf853d7ecc2c8ced35c267bfa96f.exe"
1⤵
PID:2224

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2224-0-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download
memory/2224-1-0x0000000000400000-0x0000000000576000-memory.dmp

Filesize
1.5MB

Download
memory/2224-2-0x0000000000400000-0x0000000000576000-memory.dmp

Filesize
1.5MB

Download
memory/2224-7-0x0000000000400000-0x0000000000576000-memory.dmp

Filesize
1.5MB

Download