65ae24ce822b4acbcc0b9f83b8cd4594492b3d47fd5deabdaffe64f8d361f47e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad89c3c45a1c7b2cd177cef9889ec598
Size

74KB
Sample

240409-27fl4sce5y
MD5

ad89c3c45a1c7b2cd177cef9889ec598
SHA1

81c4a97904798220f23249ed43f57db8d35cc34f
SHA256

65ae24ce822b4acbcc0b9f83b8cd4594492b3d47fd5deabdaffe64f8d361f47e
SHA512

1e477fadd535df7efb565bcc033bccb8e6bde6c853c7461f5e9e2f60e4cd940d71272f55b46b6992ea33268b99a0d00fe2dcaa1634faae66aee52bc6dc2b699b
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTkc:ZhpAyazIlyazTkc

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  ad89c3c45a1c7b2cd177cef9889ec598
- Size
  
  74KB
- MD5
  
  ad89c3c45a1c7b2cd177cef9889ec598
- SHA1
  
  81c4a97904798220f23249ed43f57db8d35cc34f
- SHA256
  
  65ae24ce822b4acbcc0b9f83b8cd4594492b3d47fd5deabdaffe64f8d361f47e
- SHA512
  
  1e477fadd535df7efb565bcc033bccb8e6bde6c853c7461f5e9e2f60e4cd940d71272f55b46b6992ea33268b99a0d00fe2dcaa1634faae66aee52bc6dc2b699b
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTkc:ZhpAyazIlyazTkc
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer