8a2c9d5d038b63ffb3021272bfdcf31d954cbffeb4bb3cd968a3def177a3ab6a | Triage

Sharing

General

Target

8a2c9d5d038b63ffb3021272bfdcf31d954cbffeb4bb3cd968a3def177a3ab6a
Size

17KB
Sample

240523-mb6fbsch7y
MD5

080abf8eb3cd04125e73d927a1d12497
SHA1

ab75b1ac42200c59b2d2da37058eaed44a896e7b
SHA256

8a2c9d5d038b63ffb3021272bfdcf31d954cbffeb4bb3cd968a3def177a3ab6a
SHA512

72564ab9a4877723fe4e7f5b42f79935d909f9154218a638041c3cf6975d349706d28d1576e7858985d7c7b7b7712632e1e4bbb9e97b44c8888133c966bba13d
SSDEEP

384:x+uPfoQ+DfYMzKdPEsOuubuEG3KHM2/G/pw:IMAQ+BzWPEwnE+KHM2/GW

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  8a2c9d5d038b63ffb3021272bfdcf31d954cbffeb4bb3cd968a3def177a3ab6a
- Size
  
  17KB
- MD5
  
  080abf8eb3cd04125e73d927a1d12497
- SHA1
  
  ab75b1ac42200c59b2d2da37058eaed44a896e7b
- SHA256
  
  8a2c9d5d038b63ffb3021272bfdcf31d954cbffeb4bb3cd968a3def177a3ab6a
- SHA512
  
  72564ab9a4877723fe4e7f5b42f79935d909f9154218a638041c3cf6975d349706d28d1576e7858985d7c7b7b7712632e1e4bbb9e97b44c8888133c966bba13d
- SSDEEP
  
  384:x+uPfoQ+DfYMzKdPEsOuubuEG3KHM2/G/pw:IMAQ+BzWPEwnE+KHM2/GW
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer