4b30448013b8fa0dfb2d3dcaf5a1d5a6b9de9f217155862a2b33db737139e07a | Triage

Sharing

General

Target

4b30448013b8fa0dfb2d3dcaf5a1d5a6b9de9f217155862a2b33db737139e07a
Size

2.7MB
Sample

240428-16a5kaah2y
MD5

45c9bfe4532f1d9af0ba1454d4f7102a
SHA1

82ec56684e9953e422665d92e8889f096f8cdbe0
SHA256

4b30448013b8fa0dfb2d3dcaf5a1d5a6b9de9f217155862a2b33db737139e07a
SHA512

5cab234a4c03362834138e30a6768d52e8bbac6ffa0bc57e094930b9369046f47459881a92c59089e657d222e23a1ed652433e241517dec5768b30c2c585c2ec
SSDEEP

49152:OAkvh1A6WzcnH7xxjSjyW/QWWjJqPjSjhTSGIo8Y70tgPzJiA466l17s8ihXc:OAkvqmxGj7/WdqPm2tOza6m17chX

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  4b30448013b8fa0dfb2d3dcaf5a1d5a6b9de9f217155862a2b33db737139e07a
- Size
  
  2.7MB
- MD5
  
  45c9bfe4532f1d9af0ba1454d4f7102a
- SHA1
  
  82ec56684e9953e422665d92e8889f096f8cdbe0
- SHA256
  
  4b30448013b8fa0dfb2d3dcaf5a1d5a6b9de9f217155862a2b33db737139e07a
- SHA512
  
  5cab234a4c03362834138e30a6768d52e8bbac6ffa0bc57e094930b9369046f47459881a92c59089e657d222e23a1ed652433e241517dec5768b30c2c585c2ec
- SSDEEP
  
  49152:OAkvh1A6WzcnH7xxjSjyW/QWWjJqPjSjhTSGIo8Y70tgPzJiA466l17s8ihXc:OAkvqmxGj7/WdqPm2tOza6m17chX
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2