b1da014752e278d82142ca01541e6602c5ef604b59d73847c59de2ed6514e5c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1da014752e278d82142ca01541e6602c5ef604b59d73847c59de2ed6514e5c6
Size

346KB
Sample

240420-b39raadb48
MD5

c682e14f7ee9c240f0f01c8e3c32a30a
SHA1

95c3e8ad37a1fbf94fc9bf4f1e3e0f80cc73dbd7
SHA256

b1da014752e278d82142ca01541e6602c5ef604b59d73847c59de2ed6514e5c6
SHA512

83f00d387fc246d5a0dcf321b775a092fbb5ba6e98f97dfc1e0ca916f05e93e064fe7daa77e53999be598bd82a404cb4032df35493c7898cfe44b9636d1a0a56
SSDEEP

6144:T8Ppl1ZpJBEjJakglAgWZBdFeCaUPL8+XCwm0RQ2aXswAXVsOB8N0d+haxwYuWKS:TWJBEj8zZWZJeTQQkPa0AN0d6FY2S

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  b1da014752e278d82142ca01541e6602c5ef604b59d73847c59de2ed6514e5c6
- Size
  
  346KB
- MD5
  
  c682e14f7ee9c240f0f01c8e3c32a30a
- SHA1
  
  95c3e8ad37a1fbf94fc9bf4f1e3e0f80cc73dbd7
- SHA256
  
  b1da014752e278d82142ca01541e6602c5ef604b59d73847c59de2ed6514e5c6
- SHA512
  
  83f00d387fc246d5a0dcf321b775a092fbb5ba6e98f97dfc1e0ca916f05e93e064fe7daa77e53999be598bd82a404cb4032df35493c7898cfe44b9636d1a0a56
- SSDEEP
  
  6144:T8Ppl1ZpJBEjJakglAgWZBdFeCaUPL8+XCwm0RQ2aXswAXVsOB8N0d+haxwYuWKS:TWJBEj8zZWZJeTQQkPa0AN0d6FY2S
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2