c879759e0873a65ef51deae59224f4ebbce0ca6f8d4ec9dbe68add198769f8b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c879759e0873a65ef51deae59224f4ebbce0ca6f8d4ec9dbe68add198769f8b4
Size

1.8MB
Sample

240405-el9xhabf51
MD5

c2afb267efe1c3cd3064a252f91bea89
SHA1

a8c27b7d3fc128850dcf7853fdb21eb1820e6ee6
SHA256

c879759e0873a65ef51deae59224f4ebbce0ca6f8d4ec9dbe68add198769f8b4
SHA512

ef246f9df7d4fe661e80ee6bf239d66fb1993458e498e2c79f13d974f64415df4a6d10a3abc5b91836112ccc357a1b619f18ba4dc660a5c068375e251505781a
SSDEEP

49152:4KJ0WR7AFPyyiSruXKpk3WFDL9zxnSc70jIpM3kiSBM29mhNq:4KlBAFPydSS6W6X9lnr70uMhSBrkNq

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  c879759e0873a65ef51deae59224f4ebbce0ca6f8d4ec9dbe68add198769f8b4
- Size
  
  1.8MB
- MD5
  
  c2afb267efe1c3cd3064a252f91bea89
- SHA1
  
  a8c27b7d3fc128850dcf7853fdb21eb1820e6ee6
- SHA256
  
  c879759e0873a65ef51deae59224f4ebbce0ca6f8d4ec9dbe68add198769f8b4
- SHA512
  
  ef246f9df7d4fe661e80ee6bf239d66fb1993458e498e2c79f13d974f64415df4a6d10a3abc5b91836112ccc357a1b619f18ba4dc660a5c068375e251505781a
- SSDEEP
  
  49152:4KJ0WR7AFPyyiSruXKpk3WFDL9zxnSc70jIpM3kiSBM29mhNq:4KlBAFPydSS6W6X9lnr70uMhSBrkNq
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2