ae642b5d172c3d220d2c03d40e3ed754692f656c3a1c4ee23c31f637c856e805 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae642b5d172c3d220d2c03d40e3ed754692f656c3a1c4ee23c31f637c856e805
Size

71KB
Sample

240425-cc4m1sdc35
MD5

65087b42ab6cbee8f16a512c21d7ea7d
SHA1

9bd61e82a61cb2b29dea8be54d28958ef06e3015
SHA256

ae642b5d172c3d220d2c03d40e3ed754692f656c3a1c4ee23c31f637c856e805
SHA512

c2db19e2c199b173a54eae03c59719b21d9f0bbf5971f210ae57383e1ae4330f30b8500112f5e95429aa8153e9c104c9382749b2dc9e1e884e4cbac7ffae23c1
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTL:ZhpAyazIlyazTL

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  ae642b5d172c3d220d2c03d40e3ed754692f656c3a1c4ee23c31f637c856e805
- Size
  
  71KB
- MD5
  
  65087b42ab6cbee8f16a512c21d7ea7d
- SHA1
  
  9bd61e82a61cb2b29dea8be54d28958ef06e3015
- SHA256
  
  ae642b5d172c3d220d2c03d40e3ed754692f656c3a1c4ee23c31f637c856e805
- SHA512
  
  c2db19e2c199b173a54eae03c59719b21d9f0bbf5971f210ae57383e1ae4330f30b8500112f5e95429aa8153e9c104c9382749b2dc9e1e884e4cbac7ffae23c1
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTL:ZhpAyazIlyazTL
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer