2531284941f8d8e7c8e61b10b7104b9ad727779ab642768f045f5cd54be42ac1 | Triage

Sharing

General

Target

2531284941f8d8e7c8e61b10b7104b9ad727779ab642768f045f5cd54be42ac1
Size

2.6MB
Sample

240427-k7v85afd67
MD5

aeb5c7533cc7a9030b26d80a034fbde6
SHA1

8a759dbe0e7ee8d807bc6a5c7b92de122f9c7420
SHA256

2531284941f8d8e7c8e61b10b7104b9ad727779ab642768f045f5cd54be42ac1
SHA512

fe03a2d4bee7ed93e6d70964b255fea509d82c1b67ac39eb2b354674de42fb40314cfa7918ac7d9dc6e3e956aef7c8b420ac151deff55269e51ec7936266c4a3
SSDEEP

49152:itadbAmDgGDRGTSLzMOA18TZnZc0nYQckhEpXhEQTZ1lsc07Pc6Js+vn4r5KKlVg:I2DRGTS/wmZnZcPZkM2c6nvn4NKAV+jF

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2531284941f8d8e7c8e61b10b7104b9ad727779ab642768f045f5cd54be42ac1
- Size
  
  2.6MB
- MD5
  
  aeb5c7533cc7a9030b26d80a034fbde6
- SHA1
  
  8a759dbe0e7ee8d807bc6a5c7b92de122f9c7420
- SHA256
  
  2531284941f8d8e7c8e61b10b7104b9ad727779ab642768f045f5cd54be42ac1
- SHA512
  
  fe03a2d4bee7ed93e6d70964b255fea509d82c1b67ac39eb2b354674de42fb40314cfa7918ac7d9dc6e3e956aef7c8b420ac151deff55269e51ec7936266c4a3
- SSDEEP
  
  49152:itadbAmDgGDRGTSLzMOA18TZnZc0nYQckhEpXhEQTZ1lsc07Pc6Js+vn4r5KKlVg:I2DRGTS/wmZnZcPZkM2c6nvn4NKAV+jF
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2