ce35c3f58ae10fe6ad69add959b6f99834b52b79353fe4fc19a4c4dcca3a65fd | Triage

Sharing

General

Target

ce35c3f58ae10fe6ad69add959b6f99834b52b79353fe4fc19a4c4dcca3a65fd
Size

386KB
Sample

240306-na349aaf62
MD5

72dfde60075453ca1f42449435f7d065
SHA1

0cc24486fc24e4fd8b0f6a3e34a4cf7f373eb3d8
SHA256

ce35c3f58ae10fe6ad69add959b6f99834b52b79353fe4fc19a4c4dcca3a65fd
SHA512

5989a9037602fcd0452b8fe3bc8c14b3e159ab8d3a4c4040186374617b2c96cb30423985f589029eeccd18bbe49a277ed18adfdaf593c1754cc57ea72b413953
SSDEEP

6144:FEWDFDs5t38dX6pxE4XU7kpJTcnFOHuln+Otc+EkzI8jSejCE8aKP3sGvLbhcy/N:mDux5FHLAcudQo/uOueJZJmR+

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  ce35c3f58ae10fe6ad69add959b6f99834b52b79353fe4fc19a4c4dcca3a65fd
- Size
  
  386KB
- MD5
  
  72dfde60075453ca1f42449435f7d065
- SHA1
  
  0cc24486fc24e4fd8b0f6a3e34a4cf7f373eb3d8
- SHA256
  
  ce35c3f58ae10fe6ad69add959b6f99834b52b79353fe4fc19a4c4dcca3a65fd
- SHA512
  
  5989a9037602fcd0452b8fe3bc8c14b3e159ab8d3a4c4040186374617b2c96cb30423985f589029eeccd18bbe49a277ed18adfdaf593c1754cc57ea72b413953
- SSDEEP
  
  6144:FEWDFDs5t38dX6pxE4XU7kpJTcnFOHuln+Otc+EkzI8jSejCE8aKP3sGvLbhcy/N:mDux5FHLAcudQo/uOueJZJmR+
Score

7^/10

spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2