7eabc23bc0cfa33092978f150a9cad665787b848659a02c981696b0d792c21b6 | Triage

Sharing

General

Target

7eabc23bc0cfa33092978f150a9cad665787b848659a02c981696b0d792c21b6
Size

2.6MB
Sample

240428-cq46psea99
MD5

3b665ad45a26c8e8fd19ecd287d5c695
SHA1

1bf3a9fed38a3bbcc6b3dc088da5c85f24163b10
SHA256

7eabc23bc0cfa33092978f150a9cad665787b848659a02c981696b0d792c21b6
SHA512

90d651d02c46c1aa799f17cdba57d3341cfdcdc6cea67b398abbd965e91b964496801e92118a134081f09656cf08bf4ee6ea43724a28f3581d13f8989dff6c88
SSDEEP

49152:4lG0InD/TSdCJqGrltkwJL9VoKKKbJjSjhTSGIo8Y70t4omh6hkTCHVOx6+m:4lGlumr7JL9rJbJm2txa6KTCnL

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  7eabc23bc0cfa33092978f150a9cad665787b848659a02c981696b0d792c21b6
- Size
  
  2.6MB
- MD5
  
  3b665ad45a26c8e8fd19ecd287d5c695
- SHA1
  
  1bf3a9fed38a3bbcc6b3dc088da5c85f24163b10
- SHA256
  
  7eabc23bc0cfa33092978f150a9cad665787b848659a02c981696b0d792c21b6
- SHA512
  
  90d651d02c46c1aa799f17cdba57d3341cfdcdc6cea67b398abbd965e91b964496801e92118a134081f09656cf08bf4ee6ea43724a28f3581d13f8989dff6c88
- SSDEEP
  
  49152:4lG0InD/TSdCJqGrltkwJL9VoKKKbJjSjhTSGIo8Y70t4omh6hkTCHVOx6+m:4lGlumr7JL9rJbJm2txa6KTCnL
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2