499f9456b7d506635a697cad9b15804a3ca09f28120f6c8948f5b174fa1d60c0 | Triage

Sharing

General

Target

499f9456b7d506635a697cad9b15804a3ca09f28120f6c8948f5b174fa1d60c0
Size

257KB
Sample

240408-zpwt9seh9s
MD5

41f8c2603ed2e378d54a95705b0b144d
SHA1

9492250cffb593cf4363cd296d30be863621336e
SHA256

499f9456b7d506635a697cad9b15804a3ca09f28120f6c8948f5b174fa1d60c0
SHA512

f8d5a3cb1eb8862cd0b38bff242405fb40707f173da18df67db003ddfb9d706fe451338939c6331c6ade7e20bce63e652299d32b14750aed73fa0e4deae92b29
SSDEEP

3072:QoW4d9Io7vaFPpSDoYXLQKWgPttoCyy4yqfNJQj/iep9CWYNI2txDjuJiemPagIC:QSdZIPw0gPttR14dzxOY

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  499f9456b7d506635a697cad9b15804a3ca09f28120f6c8948f5b174fa1d60c0
- Size
  
  257KB
- MD5
  
  41f8c2603ed2e378d54a95705b0b144d
- SHA1
  
  9492250cffb593cf4363cd296d30be863621336e
- SHA256
  
  499f9456b7d506635a697cad9b15804a3ca09f28120f6c8948f5b174fa1d60c0
- SHA512
  
  f8d5a3cb1eb8862cd0b38bff242405fb40707f173da18df67db003ddfb9d706fe451338939c6331c6ade7e20bce63e652299d32b14750aed73fa0e4deae92b29
- SSDEEP
  
  3072:QoW4d9Io7vaFPpSDoYXLQKWgPttoCyy4yqfNJQj/iep9CWYNI2txDjuJiemPagIC:QSdZIPw0gPttR14dzxOY
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2