18111e4df51f1ff288940549b80fd6b8f611226e577c1abb156ee65970d33ca8 | Triage

Sharing

General

Target

18111e4df51f1ff288940549b80fd6b8f611226e577c1abb156ee65970d33ca8
Size

2.6MB
Sample

240427-h8k4faed6v
MD5

516f5d0416824345433e0f2fc4600f42
SHA1

b4ee6912653a158fc01ea8ca4c674d1977418706
SHA256

18111e4df51f1ff288940549b80fd6b8f611226e577c1abb156ee65970d33ca8
SHA512

98b432b49be35332410b44aaada5be6285e6d443d6b4c952e43dd449b8cf66ee0335990d9a21bfd1f3e165d52d0abee3de766d69dbfbdd9fa1a628331b5a84e1
SSDEEP

49152:ksMgBHgPORafvo3gn7rs0O5MOMeNW7QsxDEpXhEQTZ1lsc07Pvu7KbzxPpIjj5SF:LJZRano3os0AMO5klxu2msxulS

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  18111e4df51f1ff288940549b80fd6b8f611226e577c1abb156ee65970d33ca8
- Size
  
  2.6MB
- MD5
  
  516f5d0416824345433e0f2fc4600f42
- SHA1
  
  b4ee6912653a158fc01ea8ca4c674d1977418706
- SHA256
  
  18111e4df51f1ff288940549b80fd6b8f611226e577c1abb156ee65970d33ca8
- SHA512
  
  98b432b49be35332410b44aaada5be6285e6d443d6b4c952e43dd449b8cf66ee0335990d9a21bfd1f3e165d52d0abee3de766d69dbfbdd9fa1a628331b5a84e1
- SSDEEP
  
  49152:ksMgBHgPORafvo3gn7rs0O5MOMeNW7QsxDEpXhEQTZ1lsc07Pvu7KbzxPpIjj5SF:LJZRano3os0AMO5klxu2msxulS
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2