e2c37a525e784b329932248ef233f068a31e06ad0a5030062a01ad6c70a698ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba97db0a10ed60347e38ee232efa8ca1
Size

212KB
Sample

240308-fsmwzsgg8w
MD5

ba97db0a10ed60347e38ee232efa8ca1
SHA1

16448a25b8dc9bed2f58981accc4e9e4af6fce48
SHA256

e2c37a525e784b329932248ef233f068a31e06ad0a5030062a01ad6c70a698ed
SHA512

32e752ec5f5f92f51e17a4f55d2d8eaeffaccbde8e40d3f4ff249831d50b80be42c2a79158e9a042a7c3a97c68cbc1e856c33269e6d6084e387ce7b82ccf15bf
SSDEEP

3072:vsum/El+riSk4URQ1hvODX/HzJYBhrY0hnea8G3t9grH9HCA7Zl221Uhz:vsuCEl+riijWD2vY0hnec3tYtl2V

Score

7^/10

collection discovery spyware stealer

Malware Config

Targets

- Target
  
  ba97db0a10ed60347e38ee232efa8ca1
- Size
  
  212KB
- MD5
  
  ba97db0a10ed60347e38ee232efa8ca1
- SHA1
  
  16448a25b8dc9bed2f58981accc4e9e4af6fce48
- SHA256
  
  e2c37a525e784b329932248ef233f068a31e06ad0a5030062a01ad6c70a698ed
- SHA512
  
  32e752ec5f5f92f51e17a4f55d2d8eaeffaccbde8e40d3f4ff249831d50b80be42c2a79158e9a042a7c3a97c68cbc1e856c33269e6d6084e387ce7b82ccf15bf
- SSDEEP
  
  3072:vsum/El+riSk4URQ1hvODX/HzJYBhrY0hnea8G3t9grH9HCA7Zl221Uhz:vsuCEl+riijWD2vY0hnec3tYtl2V
Score

7^/10

collection discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectiondiscoveryspywarestealer

behavioral2

discoveryspywarestealer