3219f4a3463f0231ad524bca37aba19e759e08640f0e225db6c7c2b880221c55 | Triage

Sharing

General

Target

3219f4a3463f0231ad524bca37aba19e759e08640f0e225db6c7c2b880221c55
Size

2.6MB
Sample

240424-mcj9gsgf96
MD5

08b7726655b2075e1a1ec7717ca3f95e
SHA1

f1397da7fb8f3bf0b19b81a26b94471873127137
SHA256

3219f4a3463f0231ad524bca37aba19e759e08640f0e225db6c7c2b880221c55
SHA512

50d3e40a3c3d69275d901da0cc9daf2833ea6ac05dbccc8e7f7fc6d65ae8c3025b5fedb599c16083eff51624557d665c11ae06e38eb39c9fe2b8ac33298002ed
SSDEEP

49152:fBEb49vU9jUVhufW2zW3dKAjj467kdXx1EpXhEQTZ1lsc07PqxOA2t0SJuVaU:pE8RVh19NKAjU5dxg2/WSY

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  3219f4a3463f0231ad524bca37aba19e759e08640f0e225db6c7c2b880221c55
- Size
  
  2.6MB
- MD5
  
  08b7726655b2075e1a1ec7717ca3f95e
- SHA1
  
  f1397da7fb8f3bf0b19b81a26b94471873127137
- SHA256
  
  3219f4a3463f0231ad524bca37aba19e759e08640f0e225db6c7c2b880221c55
- SHA512
  
  50d3e40a3c3d69275d901da0cc9daf2833ea6ac05dbccc8e7f7fc6d65ae8c3025b5fedb599c16083eff51624557d665c11ae06e38eb39c9fe2b8ac33298002ed
- SSDEEP
  
  49152:fBEb49vU9jUVhufW2zW3dKAjj467kdXx1EpXhEQTZ1lsc07PqxOA2t0SJuVaU:pE8RVh19NKAjU5dxg2/WSY
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2