3a1b12e6011a9cad22fa52d9baa1bcb0024d98ee07c9ba3eec829874d6162644 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4fe650764ea32a97093960f6cf751d4
Size

175KB
Sample

240319-c1vd9afh4w
MD5

d4fe650764ea32a97093960f6cf751d4
SHA1

af13c9d3d7fcb68c5e67a7dbb399c3de84930233
SHA256

3a1b12e6011a9cad22fa52d9baa1bcb0024d98ee07c9ba3eec829874d6162644
SHA512

0cd0157fc36bd6c3fb02f56a9526a14ccd57332ccbe6cf26c60fa7832754b3ee87c2df60b4f3a92da87063ef2043119f2205fa65787be906648ed9d66adb8ce0
SSDEEP

3072:efVKFThu95+vYEH17aalqRkClbJMkqlhf8rxB:eoTEgYEH1uaUb6/f8r

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  d4fe650764ea32a97093960f6cf751d4
- Size
  
  175KB
- MD5
  
  d4fe650764ea32a97093960f6cf751d4
- SHA1
  
  af13c9d3d7fcb68c5e67a7dbb399c3de84930233
- SHA256
  
  3a1b12e6011a9cad22fa52d9baa1bcb0024d98ee07c9ba3eec829874d6162644
- SHA512
  
  0cd0157fc36bd6c3fb02f56a9526a14ccd57332ccbe6cf26c60fa7832754b3ee87c2df60b4f3a92da87063ef2043119f2205fa65787be906648ed9d66adb8ce0
- SSDEEP
  
  3072:efVKFThu95+vYEH17aalqRkClbJMkqlhf8rxB:eoTEgYEH1uaUb6/f8r
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2