48cfcfb5d8c6b6a85e8206e115555e17e52841002a773d0534cbaf96e66340ac | Triage

Sharing

General

Target

48cfcfb5d8c6b6a85e8206e115555e17e52841002a773d0534cbaf96e66340ac
Size

2.6MB
Sample

240427-k7wjwsfd69
MD5

30239ed873458c8b4b681135fc52d1d8
SHA1

0a389da079d7b6885eab70db7dd6d15c7cb89a43
SHA256

48cfcfb5d8c6b6a85e8206e115555e17e52841002a773d0534cbaf96e66340ac
SHA512

041cfa8da41dfccbe4877935a74b7b4b5c31430bf119d3d0169661aaea4fdac62e06874bfc730d64cdba7b0f31b6d2ecd8928b723c55b3893ed5929f188c13bb
SSDEEP

49152:hk1IYtn/nOeAJKjUPIQ6IkW8kLf/8515pXhEQTZ1lsc47vHew9TajghMTueK+4/p:hkKY5AJKIsIkWF05VeHT+5Tuey/f3u

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  48cfcfb5d8c6b6a85e8206e115555e17e52841002a773d0534cbaf96e66340ac
- Size
  
  2.6MB
- MD5
  
  30239ed873458c8b4b681135fc52d1d8
- SHA1
  
  0a389da079d7b6885eab70db7dd6d15c7cb89a43
- SHA256
  
  48cfcfb5d8c6b6a85e8206e115555e17e52841002a773d0534cbaf96e66340ac
- SHA512
  
  041cfa8da41dfccbe4877935a74b7b4b5c31430bf119d3d0169661aaea4fdac62e06874bfc730d64cdba7b0f31b6d2ecd8928b723c55b3893ed5929f188c13bb
- SSDEEP
  
  49152:hk1IYtn/nOeAJKjUPIQ6IkW8kLf/8515pXhEQTZ1lsc47vHew9TajghMTueK+4/p:hkKY5AJKIsIkWF05VeHT+5Tuey/f3u
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2