6a6ef7013c80696e6a2fae5a89303eba8acd3e4e6f9d446632144f8b1cebdf3d | Triage

Sharing

General

Target

6a6ef7013c80696e6a2fae5a89303eba8acd3e4e6f9d446632144f8b1cebdf3d
Size

528KB
Sample

240424-vmcamadf54
MD5

020faa133724e023555f8cb094386727
SHA1

87aa38f42acf8d7ff1b79b22a03ef5ea92fc3e4b
SHA256

6a6ef7013c80696e6a2fae5a89303eba8acd3e4e6f9d446632144f8b1cebdf3d
SHA512

3016a268eb1ff43bfb8e78a814a20a3ef1b7ce0a8d20d673bf6cf2e2fc0b097dfacb6029f754035a5a12c648e290860ba05134c535977cbe7e99643cfed45ab8
SSDEEP

12288:0WCAzq1fATq+ZgxcbtWPk341g3yR6wokC4HzIi:0WrzY+HIPEIgidC4T

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  6a6ef7013c80696e6a2fae5a89303eba8acd3e4e6f9d446632144f8b1cebdf3d
- Size
  
  528KB
- MD5
  
  020faa133724e023555f8cb094386727
- SHA1
  
  87aa38f42acf8d7ff1b79b22a03ef5ea92fc3e4b
- SHA256
  
  6a6ef7013c80696e6a2fae5a89303eba8acd3e4e6f9d446632144f8b1cebdf3d
- SHA512
  
  3016a268eb1ff43bfb8e78a814a20a3ef1b7ce0a8d20d673bf6cf2e2fc0b097dfacb6029f754035a5a12c648e290860ba05134c535977cbe7e99643cfed45ab8
- SSDEEP
  
  12288:0WCAzq1fATq+ZgxcbtWPk341g3yR6wokC4HzIi:0WrzY+HIPEIgidC4T
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2