6262544699344a35eccec6a80b1877a0d66899109f563767305d22faed9e9a7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6262544699344a35eccec6a80b1877a0d66899109f563767305d22faed9e9a7d
Size

3.2MB
Sample

240424-2bbchsag69
MD5

33d60f292304d7dac7db4f4051ef78a0
SHA1

c812a92288f38b326c8fb9047feea13485ba70ac
SHA256

6262544699344a35eccec6a80b1877a0d66899109f563767305d22faed9e9a7d
SHA512

ea25a9051439601aa0ca18d4205cf051c4b317059270526cbfdc52f461bbe08520d63d163bd5fc4da89079e3656932a275dfd1d0d06a5e5c381f78e3c6fc38c2
SSDEEP

49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBJB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUp+bVz8eLFcz

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  6262544699344a35eccec6a80b1877a0d66899109f563767305d22faed9e9a7d
- Size
  
  3.2MB
- MD5
  
  33d60f292304d7dac7db4f4051ef78a0
- SHA1
  
  c812a92288f38b326c8fb9047feea13485ba70ac
- SHA256
  
  6262544699344a35eccec6a80b1877a0d66899109f563767305d22faed9e9a7d
- SHA512
  
  ea25a9051439601aa0ca18d4205cf051c4b317059270526cbfdc52f461bbe08520d63d163bd5fc4da89079e3656932a275dfd1d0d06a5e5c381f78e3c6fc38c2
- SSDEEP
  
  49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBJB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUp+bVz8eLFcz
Score

7^/10

persistence spyware stealer
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer