0871ba8512e30a548081fb691a605feea26f37f459358383b203aa46c4bfd6e3 | Triage

Sharing

General

Target

0871ba8512e30a548081fb691a605feea26f37f459358383b203aa46c4bfd6e3
Size

5.3MB
Sample

240524-w36d3sef7w
MD5

dc69ac35c4b84bda07e20162fde775de
SHA1

a82c88864250ef2150c653d830c27c7d6d2fbf5a
SHA256

0871ba8512e30a548081fb691a605feea26f37f459358383b203aa46c4bfd6e3
SHA512

8d350012e18a232eceeabf7291a117841f4d759239bf7e2950179cb2e4217fe55ce4ada6a006f9e33c9aee9a981ac148a2d20bf54374263ce226f43568b6fe24
SSDEEP

98304:JTy0NFD21fs+hdswY8FfU0i7YZEFLOAkGkzdnEVomFHKnP1kKk8Y3T:7Dm7hu6FfU0i7YZEFLOyomFHKnP1kKD4

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  0871ba8512e30a548081fb691a605feea26f37f459358383b203aa46c4bfd6e3
- Size
  
  5.3MB
- MD5
  
  dc69ac35c4b84bda07e20162fde775de
- SHA1
  
  a82c88864250ef2150c653d830c27c7d6d2fbf5a
- SHA256
  
  0871ba8512e30a548081fb691a605feea26f37f459358383b203aa46c4bfd6e3
- SHA512
  
  8d350012e18a232eceeabf7291a117841f4d759239bf7e2950179cb2e4217fe55ce4ada6a006f9e33c9aee9a981ac148a2d20bf54374263ce226f43568b6fe24
- SSDEEP
  
  98304:JTy0NFD21fs+hdswY8FfU0i7YZEFLOAkGkzdnEVomFHKnP1kKk8Y3T:7Dm7hu6FfU0i7YZEFLOyomFHKnP1kKD4
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2