019d1cc818294f84ab8c7f77385d6fc259144e43192ea941996c409a3425b71d | Triage

Sharing

General

Target

019d1cc818294f84ab8c7f77385d6fc259144e43192ea941996c409a3425b71d
Size

2.7MB
Sample

240428-wvwjxadh5s
MD5

6064fabeb47847fe30940f0deabc2bf7
SHA1

9eaeabf735c6ab37e92ff7c07aee54bb91b03c58
SHA256

019d1cc818294f84ab8c7f77385d6fc259144e43192ea941996c409a3425b71d
SHA512

8298ebb560d7a992c5344b309b7023f80642c72991529cb3a48c89fba91051d822d51da7c126f4bf7f84178dc53d112bfe8a1f669c00111eb3efef5a5cc899c4
SSDEEP

49152:wjhHu5Kv6DCWlo83SOaZXi87JjigLHJH1jSjhTSGIo8Y70FPzrYJKOBJndQt+8LF:wjhu5gn8D8yqJpFH1m2FrQFlo

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  019d1cc818294f84ab8c7f77385d6fc259144e43192ea941996c409a3425b71d
- Size
  
  2.7MB
- MD5
  
  6064fabeb47847fe30940f0deabc2bf7
- SHA1
  
  9eaeabf735c6ab37e92ff7c07aee54bb91b03c58
- SHA256
  
  019d1cc818294f84ab8c7f77385d6fc259144e43192ea941996c409a3425b71d
- SHA512
  
  8298ebb560d7a992c5344b309b7023f80642c72991529cb3a48c89fba91051d822d51da7c126f4bf7f84178dc53d112bfe8a1f669c00111eb3efef5a5cc899c4
- SSDEEP
  
  49152:wjhHu5Kv6DCWlo83SOaZXi87JjigLHJH1jSjhTSGIo8Y70FPzrYJKOBJndQt+8LF:wjhu5gn8D8yqJpFH1m2FrQFlo
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2