de15e8a4bfd339d459733874db95fcc6aa8e6312408fd93727e9c7961f025481 | Triage

Sharing

General

Target

selfbot.exe
Size

37.7MB
Sample

240530-pebq8sgf7t
MD5

bef08d66c48b823550d92ea21215b0fb
SHA1

05c810ba463ca204057fb0f9cea0d65db847389f
SHA256

de15e8a4bfd339d459733874db95fcc6aa8e6312408fd93727e9c7961f025481
SHA512

7342515a89fdb2dd9875e04b1cf0e367fd50ddc382c3ef9238c6549dd4f4fd471f85fdff39911205475556da154bed3d2491c5d8eac19b98fb4032e04b377326
SSDEEP

196608:Nn5g922m8c2zB/OEURkjTSnOb4DSh4J4ohxrW4HwXmWlh/Dq:zg928cIB2BkenOb4DbJ4ohBWlh

Score

7^/10

execution spyware stealer

Malware Config

Targets

- Target
  
  selfbot.exe
- Size
  
  37.7MB
- MD5
  
  bef08d66c48b823550d92ea21215b0fb
- SHA1
  
  05c810ba463ca204057fb0f9cea0d65db847389f
- SHA256
  
  de15e8a4bfd339d459733874db95fcc6aa8e6312408fd93727e9c7961f025481
- SHA512
  
  7342515a89fdb2dd9875e04b1cf0e367fd50ddc382c3ef9238c6549dd4f4fd471f85fdff39911205475556da154bed3d2491c5d8eac19b98fb4032e04b377326
- SSDEEP
  
  196608:Nn5g922m8c2zB/OEURkjTSnOb4DSh4J4ohxrW4HwXmWlh/Dq:zg928cIB2BkenOb4DbJ4ohBWlh
Score

7^/10

execution spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

executionspywarestealer