007d61bc4a2281337c5b7ea0023f0991bd6b8e6075af75f0f037cb253fc26fb1 | Triage

Sharing

General

Target

007d61bc4a2281337c5b7ea0023f0991bd6b8e6075af75f0f037cb253fc26fb1
Size

796KB
Sample

240524-wn8wnaee72
MD5

5ecef65f014eef28fcc71736135f3d75
SHA1

4469ad90e3532bdccf9ed049cf55e9f9af3cab00
SHA256

007d61bc4a2281337c5b7ea0023f0991bd6b8e6075af75f0f037cb253fc26fb1
SHA512

b89795219846a66e677c5e8f5225782785462d36f47a550ba47ed5e4cabae35eade5ec12afa9b8882456e3b130a7786892d082bfb45e493e76e96a982e25ff3a
SSDEEP

12288:1e4z4D60MQuPMeS+GSK4OOXsVAwMKz/xh/qu/OmLEtnJmbA8bWbc+SJKFQ7LDi8/:1D+60runS+G7ecVTLEu2hVx/F0i8Aa

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  007d61bc4a2281337c5b7ea0023f0991bd6b8e6075af75f0f037cb253fc26fb1
- Size
  
  796KB
- MD5
  
  5ecef65f014eef28fcc71736135f3d75
- SHA1
  
  4469ad90e3532bdccf9ed049cf55e9f9af3cab00
- SHA256
  
  007d61bc4a2281337c5b7ea0023f0991bd6b8e6075af75f0f037cb253fc26fb1
- SHA512
  
  b89795219846a66e677c5e8f5225782785462d36f47a550ba47ed5e4cabae35eade5ec12afa9b8882456e3b130a7786892d082bfb45e493e76e96a982e25ff3a
- SSDEEP
  
  12288:1e4z4D60MQuPMeS+GSK4OOXsVAwMKz/xh/qu/OmLEtnJmbA8bWbc+SJKFQ7LDi8/:1D+60runS+G7ecVTLEu2hVx/F0i8Aa
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2