e3f68d9bf40738d6e05badbb8105e063d440b9b313eafa7e145c29f471512b69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e3f68d9bf40738d6e05badbb8105e063d440b9b313eafa7e145c29f471512b69
Size

705KB
Sample

240421-dry7hshe57
MD5

28e3d211b69a6109be61f79e8e040c08
SHA1

b23b353cce4a719cfb51fe746dca31da2aac1058
SHA256

e3f68d9bf40738d6e05badbb8105e063d440b9b313eafa7e145c29f471512b69
SHA512

af24590c9f9ecbd4b4d43ebc1982137dabf2590bf03d201d29097eb75dc437e0296ffdd3b85cd46013193e9c18b59af322afd0f89877ecb01d64faa6069254ad
SSDEEP

12288:SW9B+VAMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:SW9BuSkQ/7Gb8NLEbeZ

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  e3f68d9bf40738d6e05badbb8105e063d440b9b313eafa7e145c29f471512b69
- Size
  
  705KB
- MD5
  
  28e3d211b69a6109be61f79e8e040c08
- SHA1
  
  b23b353cce4a719cfb51fe746dca31da2aac1058
- SHA256
  
  e3f68d9bf40738d6e05badbb8105e063d440b9b313eafa7e145c29f471512b69
- SHA512
  
  af24590c9f9ecbd4b4d43ebc1982137dabf2590bf03d201d29097eb75dc437e0296ffdd3b85cd46013193e9c18b59af322afd0f89877ecb01d64faa6069254ad
- SSDEEP
  
  12288:SW9B+VAMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:SW9BuSkQ/7Gb8NLEbeZ
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2