53562890e0206c165519924186d68eebf0922542cb4a56be68917ae6fca4c372 | Triage

Sharing

General

Target

53562890e0206c165519924186d68eebf0922542cb4a56be68917ae6fca4c372.exe
Size

3.9MB
Sample

240522-216vqacd86
MD5

12b87875d1ebf8529283f50efe31a200
SHA1

ec99628ef9bb5125d2b1c0e467177adfcae7590c
SHA256

53562890e0206c165519924186d68eebf0922542cb4a56be68917ae6fca4c372
SHA512

fe0d53cfa27e2051497e1821ccf8e4a496e9e3c99aede4a12794ce86f54f47231d360fabb1148966bdd56fa3cca623d6ac4dc18d2dc230182456d0339b416f61
SSDEEP

49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBuB/bSqz8:sxX7QnxrloE5dpUpBbVz8

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  53562890e0206c165519924186d68eebf0922542cb4a56be68917ae6fca4c372.exe
- Size
  
  3.9MB
- MD5
  
  12b87875d1ebf8529283f50efe31a200
- SHA1
  
  ec99628ef9bb5125d2b1c0e467177adfcae7590c
- SHA256
  
  53562890e0206c165519924186d68eebf0922542cb4a56be68917ae6fca4c372
- SHA512
  
  fe0d53cfa27e2051497e1821ccf8e4a496e9e3c99aede4a12794ce86f54f47231d360fabb1148966bdd56fa3cca623d6ac4dc18d2dc230182456d0339b416f61
- SSDEEP
  
  49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBuB/bSqz8:sxX7QnxrloE5dpUpBbVz8
Score

7^/10

persistence spyware stealer
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer