884924afc0439b4e22b26d0c4da697c45a046be0db62516a3c7455ad1c6fea11 | Triage

Sharing

General

Target

884924afc0439b4e22b26d0c4da697c45a046be0db62516a3c7455ad1c6fea11.exe
Size

538KB
Sample

240601-bz9xwadh72
MD5

eb05e7b7a6682aff1a8bcc27f76b55b7
SHA1

d97ad0daadfd81192dd6fcb48860320c46f4f2ef
SHA256

884924afc0439b4e22b26d0c4da697c45a046be0db62516a3c7455ad1c6fea11
SHA512

10ece205397ea6a809cfb0a0ea7109fa2930996dd951e3e71ccc648d5064df473b161687f620e59fb77ed199e484ad3a61d8fdf54b748b75dba41d157baed8b7
SSDEEP

6144:0Yqdc0NkzDVjtZuTIlA410ZcN3p0NIb88WsNMPaKFP3b2V122J0sL:09J8dTfkcN3CNIb88WsNMP5F1k

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  884924afc0439b4e22b26d0c4da697c45a046be0db62516a3c7455ad1c6fea11.exe
- Size
  
  538KB
- MD5
  
  eb05e7b7a6682aff1a8bcc27f76b55b7
- SHA1
  
  d97ad0daadfd81192dd6fcb48860320c46f4f2ef
- SHA256
  
  884924afc0439b4e22b26d0c4da697c45a046be0db62516a3c7455ad1c6fea11
- SHA512
  
  10ece205397ea6a809cfb0a0ea7109fa2930996dd951e3e71ccc648d5064df473b161687f620e59fb77ed199e484ad3a61d8fdf54b748b75dba41d157baed8b7
- SSDEEP
  
  6144:0Yqdc0NkzDVjtZuTIlA410ZcN3p0NIb88WsNMPaKFP3b2V122J0sL:09J8dTfkcN3CNIb88WsNMP5F1k
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer