580504c9ef32a7cb3b69821bad35d7a5368180620e7676816bf757fc7fad3433 | Triage

Sharing

General

Target

580504c9ef32a7cb3b69821bad35d7a5368180620e7676816bf757fc7fad3433
Size

2.6MB
Sample

240427-k7ydgsgb3z
MD5

de7df1155b2a8013f6bf16608c71df93
SHA1

519eb0688902cbe99c389ff64e84bf9628d10daa
SHA256

580504c9ef32a7cb3b69821bad35d7a5368180620e7676816bf757fc7fad3433
SHA512

6b68624ab9cf6e72d0967b417ffaac245396decb8382e3991f18932694977642149042105253ee65989c724a5e565754f8da071956ca13d001be98240628e2be
SSDEEP

49152:TaFZKOYZO79r+qWiKSdbWqX9leXqvtOh5pXhEQTZ1lsc47vpUyZbyF906Zg/:eLG69r+q9yqXLr1ORepHyF906Zg

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  580504c9ef32a7cb3b69821bad35d7a5368180620e7676816bf757fc7fad3433
- Size
  
  2.6MB
- MD5
  
  de7df1155b2a8013f6bf16608c71df93
- SHA1
  
  519eb0688902cbe99c389ff64e84bf9628d10daa
- SHA256
  
  580504c9ef32a7cb3b69821bad35d7a5368180620e7676816bf757fc7fad3433
- SHA512
  
  6b68624ab9cf6e72d0967b417ffaac245396decb8382e3991f18932694977642149042105253ee65989c724a5e565754f8da071956ca13d001be98240628e2be
- SSDEEP
  
  49152:TaFZKOYZO79r+qWiKSdbWqX9leXqvtOh5pXhEQTZ1lsc47vpUyZbyF906Zg/:eLG69r+q9yqXLr1ORepHyF906Zg
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2