c29acbb387f8a0a8a977f51614f5933b4b9d030e5625390309913ed9a872dd48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-28_412bfa5e9c419949cf28e1e6c1c5c1f1_mafia
Size

1.2MB
Sample

240328-wzerysch3w
MD5

412bfa5e9c419949cf28e1e6c1c5c1f1
SHA1

02076142c38bf13f233ef66e5d4913408870230a
SHA256

c29acbb387f8a0a8a977f51614f5933b4b9d030e5625390309913ed9a872dd48
SHA512

b43ec18d55024d21c41c6860e51771a4994fda82ab487ef5a003c0e63dc17c90079708928ea834a5397a4da13009a6a39afca6141ad4c1a87684805e20c0f711
SSDEEP

24576:uw/BO7PoTQMKwULgpcfGXj3lH6VZMfQjM0rGL7U/wNV4KYViguK0OAYK:pMToTQn5LepT8aRLI+4KYVoOAR

Score

7^/10

discovery evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  2024-03-28_412bfa5e9c419949cf28e1e6c1c5c1f1_mafia
- Size
  
  1.2MB
- MD5
  
  412bfa5e9c419949cf28e1e6c1c5c1f1
- SHA1
  
  02076142c38bf13f233ef66e5d4913408870230a
- SHA256
  
  c29acbb387f8a0a8a977f51614f5933b4b9d030e5625390309913ed9a872dd48
- SHA512
  
  b43ec18d55024d21c41c6860e51771a4994fda82ab487ef5a003c0e63dc17c90079708928ea834a5397a4da13009a6a39afca6141ad4c1a87684805e20c0f711
- SSDEEP
  
  24576:uw/BO7PoTQMKwULgpcfGXj3lH6VZMfQjM0rGL7U/wNV4KYViguK0OAYK:pMToTQn5LepT8aRLI+4KYVoOAR
Score

7^/10

discovery evasion spyware stealer trojan
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionspywarestealertrojan

behavioral2

discoveryevasionspywarestealertrojan