a14e62d2fe546b685d65ac0189237bf596d4ea8186114a93558e4f42af2b1e3c | Triage

Sharing

General

Target

a14e62d2fe546b685d65ac0189237bf596d4ea8186114a93558e4f42af2b1e3c
Size

2.6MB
Sample

240428-j5gsaabg2t
MD5

44ec1c9754fa4fb2d625d5d915a52ad8
SHA1

4bf2de4ba30b32249cddf07ef6342d52aed27d30
SHA256

a14e62d2fe546b685d65ac0189237bf596d4ea8186114a93558e4f42af2b1e3c
SHA512

aa872e6a36cb30687704252202d3daa0cdae39cba1a44af10e5ece0ea2ebb89f0b07ec5d670fbb156d7879f64c9bb0e2aae3c1772fc44f6e84aeba5155307481
SSDEEP

49152:bdP0LLhfTbi6WYijaYJiH1rz/SVy+Vhy5pXhEQTZ1lsc47vjxjswkUqMCPo8OG:RcQ6WYBv1r7hGh4ejxjkMCPJJ

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  a14e62d2fe546b685d65ac0189237bf596d4ea8186114a93558e4f42af2b1e3c
- Size
  
  2.6MB
- MD5
  
  44ec1c9754fa4fb2d625d5d915a52ad8
- SHA1
  
  4bf2de4ba30b32249cddf07ef6342d52aed27d30
- SHA256
  
  a14e62d2fe546b685d65ac0189237bf596d4ea8186114a93558e4f42af2b1e3c
- SHA512
  
  aa872e6a36cb30687704252202d3daa0cdae39cba1a44af10e5ece0ea2ebb89f0b07ec5d670fbb156d7879f64c9bb0e2aae3c1772fc44f6e84aeba5155307481
- SSDEEP
  
  49152:bdP0LLhfTbi6WYijaYJiH1rz/SVy+Vhy5pXhEQTZ1lsc47vjxjswkUqMCPo8OG:RcQ6WYBv1r7hGh4ejxjkMCPJJ
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2