64eae77d83e1b268beb9891b76dfc123264a71e149385a38e0033898b236875b | Triage

Sharing

General

Target

64eae77d83e1b268beb9891b76dfc123264a71e149385a38e0033898b236875b
Size

706KB
Sample

240306-jfddkaec2v
MD5

b7ef4ba005f9a50f257e1a78f89ac857
SHA1

359645fceb869e03c93063df762587f06187601f
SHA256

64eae77d83e1b268beb9891b76dfc123264a71e149385a38e0033898b236875b
SHA512

ac904cd209cd1234344e4de748e92b66b9af34ea6f366c17b5f9342545210955801443ac776a8f5762ffcf7c08fc1a7c9eb971005316453ca293c76c915e5f1f
SSDEEP

12288:+WiB+tgFCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHMki:+WiBv8NDFKYmKOF0zr31JwAlcR3QC0O3

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  64eae77d83e1b268beb9891b76dfc123264a71e149385a38e0033898b236875b
- Size
  
  706KB
- MD5
  
  b7ef4ba005f9a50f257e1a78f89ac857
- SHA1
  
  359645fceb869e03c93063df762587f06187601f
- SHA256
  
  64eae77d83e1b268beb9891b76dfc123264a71e149385a38e0033898b236875b
- SHA512
  
  ac904cd209cd1234344e4de748e92b66b9af34ea6f366c17b5f9342545210955801443ac776a8f5762ffcf7c08fc1a7c9eb971005316453ca293c76c915e5f1f
- SSDEEP
  
  12288:+WiB+tgFCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHMki:+WiBv8NDFKYmKOF0zr31JwAlcR3QC0O3
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2