d2bce9a1995d9706465d7b590bc76fbca0330d477ffd774819135a420ff0660e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2bce9a1995d9706465d7b590bc76fbca0330d477ffd774819135a420ff0660e
Size

655KB
Sample

240422-d65b3sfa38
MD5

46f71309ebc601333c8b8803d708b9e3
SHA1

553789385f0199ec64d6662877775e2e71f1263e
SHA256

d2bce9a1995d9706465d7b590bc76fbca0330d477ffd774819135a420ff0660e
SHA512

cab6598e39e846d4bd283b75db7be75dc44b7483b6b57d53483ff52f538a3134f974b15f416b1f23750e8bdb59c7c44f61daf1ef3e5ae028e7b861156a52ed6b
SSDEEP

12288:hS0SBAQml00V0Jpq7EygtA5Qw73DzkcrWJiJH6Oxxk:DaIcpLM3XHdxxk

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  d2bce9a1995d9706465d7b590bc76fbca0330d477ffd774819135a420ff0660e
- Size
  
  655KB
- MD5
  
  46f71309ebc601333c8b8803d708b9e3
- SHA1
  
  553789385f0199ec64d6662877775e2e71f1263e
- SHA256
  
  d2bce9a1995d9706465d7b590bc76fbca0330d477ffd774819135a420ff0660e
- SHA512
  
  cab6598e39e846d4bd283b75db7be75dc44b7483b6b57d53483ff52f538a3134f974b15f416b1f23750e8bdb59c7c44f61daf1ef3e5ae028e7b861156a52ed6b
- SSDEEP
  
  12288:hS0SBAQml00V0Jpq7EygtA5Qw73DzkcrWJiJH6Oxxk:DaIcpLM3XHdxxk
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer