17c85b23258823fd58e385a13098d391aae9f8117a446bceb7a40baeb26c67b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17c85b23258823fd58e385a13098d391aae9f8117a446bceb7a40baeb26c67b1
Size

284KB
Sample

240424-qsy95aag6t
MD5

261577c8d8b73ee1810a5f812375c81d
SHA1

a6a3492d8cc9e2c282e245f8cbbd91f1306843ea
SHA256

17c85b23258823fd58e385a13098d391aae9f8117a446bceb7a40baeb26c67b1
SHA512

e03b6cdaa1668b326f87bfa6d6c8159f75c22fc6211a46688349c167bff9040debfe3dd179a9172a01c0c57e2ccc0adb93471204a73b66ec13edabe0ba00710a
SSDEEP

6144:zrZokeGUjD58nQ7zlLkWK27ZfVkzCFcamGUYqCSUxXH2L:JTUjD58Q7zlLkLCNakEGUYqCvBW

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  17c85b23258823fd58e385a13098d391aae9f8117a446bceb7a40baeb26c67b1
- Size
  
  284KB
- MD5
  
  261577c8d8b73ee1810a5f812375c81d
- SHA1
  
  a6a3492d8cc9e2c282e245f8cbbd91f1306843ea
- SHA256
  
  17c85b23258823fd58e385a13098d391aae9f8117a446bceb7a40baeb26c67b1
- SHA512
  
  e03b6cdaa1668b326f87bfa6d6c8159f75c22fc6211a46688349c167bff9040debfe3dd179a9172a01c0c57e2ccc0adb93471204a73b66ec13edabe0ba00710a
- SSDEEP
  
  6144:zrZokeGUjD58nQ7zlLkWK27ZfVkzCFcamGUYqCSUxXH2L:JTUjD58Q7zlLkLCNakEGUYqCvBW
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2