700014da7ee4fdace03006daabfcf5f85d09c4a9a3654fdeb468370ceae85f97 | Triage

Sharing

General

Target

Generator__2_.exe
Size

17.0MB
Sample

240405-k3ytfsge85
MD5

5b200dd77e88dae76027a0c8c5eefbf5
SHA1

3d03e66b202007417683039801699c6bbea2f810
SHA256

700014da7ee4fdace03006daabfcf5f85d09c4a9a3654fdeb468370ceae85f97
SHA512

d8823e0e2abaa38ab86bb161be6c8e878fc3d6f2c05b80ea762678d28a51eb75d8fff8f6579c6b271973635e62ffd1843f7f69bf2115e28c9b16a28996ae7302
SSDEEP

393216:tML/au3GH6YkDInEroXHlh2pWsKkXgAW+TA39mmpDN1BlyNuW:tMLS0GHfjErUFQpWoMQA3H1Tyf

Score

7^/10

pyinstaller spyware stealer

Malware Config

Targets

- Target
  
  Generator__2_.exe
- Size
  
  17.0MB
- MD5
  
  5b200dd77e88dae76027a0c8c5eefbf5
- SHA1
  
  3d03e66b202007417683039801699c6bbea2f810
- SHA256
  
  700014da7ee4fdace03006daabfcf5f85d09c4a9a3654fdeb468370ceae85f97
- SHA512
  
  d8823e0e2abaa38ab86bb161be6c8e878fc3d6f2c05b80ea762678d28a51eb75d8fff8f6579c6b271973635e62ffd1843f7f69bf2115e28c9b16a28996ae7302
- SSDEEP
  
  393216:tML/au3GH6YkDInEroXHlh2pWsKkXgAW+TA39mmpDN1BlyNuW:tMLS0GHfjErUFQpWoMQA3H1Tyf
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2