f5cf6589a08780aa1d2abbf898d0ada035b222b0f1d59253bb48ba57c4e84e79 | Triage

Sharing

General

Target

f5cf6589a08780aa1d2abbf898d0ada035b222b0f1d59253bb48ba57c4e84e79
Size

2.6MB
Sample

240428-wvv85sde67
MD5

9cbfc5988b74a65e78aea7c3e3e76d23
SHA1

a99c9d34ab59b743963b737c53da7e8dab73ee11
SHA256

f5cf6589a08780aa1d2abbf898d0ada035b222b0f1d59253bb48ba57c4e84e79
SHA512

0a932ba9299df581263ae033afc7b6c6b94bf828622e126200aacef191b27e72cdcafa7ccadc3e2e89907881432fc71d09989223417a83a049d142819cda00d2
SSDEEP

49152:PXF9Q1Bu4G8t31TP1YVb8+QmwrrSl9OVEpXhEQTZ1lsc07PtUFP2/gikBL1VBq+7:frZmt3J1YJJQmwKLOA2uFPi0L1

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  f5cf6589a08780aa1d2abbf898d0ada035b222b0f1d59253bb48ba57c4e84e79
- Size
  
  2.6MB
- MD5
  
  9cbfc5988b74a65e78aea7c3e3e76d23
- SHA1
  
  a99c9d34ab59b743963b737c53da7e8dab73ee11
- SHA256
  
  f5cf6589a08780aa1d2abbf898d0ada035b222b0f1d59253bb48ba57c4e84e79
- SHA512
  
  0a932ba9299df581263ae033afc7b6c6b94bf828622e126200aacef191b27e72cdcafa7ccadc3e2e89907881432fc71d09989223417a83a049d142819cda00d2
- SSDEEP
  
  49152:PXF9Q1Bu4G8t31TP1YVb8+QmwrrSl9OVEpXhEQTZ1lsc07PtUFP2/gikBL1VBq+7:frZmt3J1YJJQmwKLOA2uFPi0L1
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2