e7d113ef928f0ce62a0accc0829da9720977c75427c4c901976e689c22c22a9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7d113ef928f0ce62a0accc0829da9720977c75427c4c901976e689c22c22a9f.exe
Size

41.3MB
Sample

240422-cgymkaeb64
MD5

e1f11a32546b240111760d533a26ee81
SHA1

c47b6ec9a10d2f7c081ea4649dc8b98fba5f9de7
SHA256

e7d113ef928f0ce62a0accc0829da9720977c75427c4c901976e689c22c22a9f
SHA512

2aaad25d22e9e26669bcccd38b53493695d760ee8fff8d85cc2729fb040cf7a6ef5203801d6f0916f1f5c70ae0c08b2862367c5743d0d65fdb80382446272fda
SSDEEP

786432:t+gX4BMdhwzTQXR5FbPp6FcSS5U/LT2KzVyPVL9jvzVSLOYq1QtIZS3ILe5qW80U:nXGMK4XR3bLSCU/+6yPlhvhSyY2iIZSa

Score

7^/10

pyinstaller spyware stealer

Malware Config

Targets

- Target
  
  e7d113ef928f0ce62a0accc0829da9720977c75427c4c901976e689c22c22a9f.exe
- Size
  
  41.3MB
- MD5
  
  e1f11a32546b240111760d533a26ee81
- SHA1
  
  c47b6ec9a10d2f7c081ea4649dc8b98fba5f9de7
- SHA256
  
  e7d113ef928f0ce62a0accc0829da9720977c75427c4c901976e689c22c22a9f
- SHA512
  
  2aaad25d22e9e26669bcccd38b53493695d760ee8fff8d85cc2729fb040cf7a6ef5203801d6f0916f1f5c70ae0c08b2862367c5743d0d65fdb80382446272fda
- SSDEEP
  
  786432:t+gX4BMdhwzTQXR5FbPp6FcSS5U/LT2KzVyPVL9jvzVSLOYq1QtIZS3ILe5qW80U:nXGMK4XR3bLSCU/+6yPlhvhSyY2iIZSa
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2