965e2ba7375148faac3d0730f2b7d016ac741105eb15b5f1e5a395570f949aa9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

965e2ba7375148faac3d0730f2b7d016ac741105eb15b5f1e5a395570f949aa9
Size

4.0MB
Sample

240305-2523bsca7z
MD5

9b1008e897a245957423ee482fb7b4b4
SHA1

46c01637da9c81a7a0fe6e52b01e6e624f70575e
SHA256

965e2ba7375148faac3d0730f2b7d016ac741105eb15b5f1e5a395570f949aa9
SHA512

5a40427115f1545a777510d3ff9b3ce932b8ec6b21ce49232c11185e7fd8858418051a400e2b090b8bbb98478b14d61c6927eab6ffd779d8e3a337162db52ef3
SSDEEP

49152:EjPJJsMg0UMp2viAEk2qtFoLuzO7ge9fDqgs16IQsVToEyXfGf1dOeoSzWlnt:oP/0mpEeqgsMIQsVTXyX+tdORkWNt

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  965e2ba7375148faac3d0730f2b7d016ac741105eb15b5f1e5a395570f949aa9
- Size
  
  4.0MB
- MD5
  
  9b1008e897a245957423ee482fb7b4b4
- SHA1
  
  46c01637da9c81a7a0fe6e52b01e6e624f70575e
- SHA256
  
  965e2ba7375148faac3d0730f2b7d016ac741105eb15b5f1e5a395570f949aa9
- SHA512
  
  5a40427115f1545a777510d3ff9b3ce932b8ec6b21ce49232c11185e7fd8858418051a400e2b090b8bbb98478b14d61c6927eab6ffd779d8e3a337162db52ef3
- SSDEEP
  
  49152:EjPJJsMg0UMp2viAEk2qtFoLuzO7ge9fDqgs16IQsVToEyXfGf1dOeoSzWlnt:oP/0mpEeqgsMIQsVTXyX+tdORkWNt
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2