0df9563014cb59e44dc5035958bc084b027712e0f83ca992d179e21751d2bc24 | Triage

Sharing

General

Target

traveldoc4_unpacked.exe
Size

51KB
Sample

240606-evxnjage6z
MD5

0a1ecc15699b43a5d217ec61f9a8d900
SHA1

6d0d4005075a3eacdb5010c01e8e15e11e88adda
SHA256

0df9563014cb59e44dc5035958bc084b027712e0f83ca992d179e21751d2bc24
SHA512

afb4403baff211f6710bb95dc09df83dfafe8b5b224d5f684ed767e1553315abd7b8494c04886cf3c0b6e2d484eb0ee8928e6f1c7d83bc67e1d21bc3fe583cde
SSDEEP

768:NVDz8MMXzk+npS7cBOETqWLTXQuRVmeLJzaZjPLh:Np2k+npS0OETqW/dvzaZHh

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  traveldoc4_unpacked.exe
- Size
  
  51KB
- MD5
  
  0a1ecc15699b43a5d217ec61f9a8d900
- SHA1
  
  6d0d4005075a3eacdb5010c01e8e15e11e88adda
- SHA256
  
  0df9563014cb59e44dc5035958bc084b027712e0f83ca992d179e21751d2bc24
- SHA512
  
  afb4403baff211f6710bb95dc09df83dfafe8b5b224d5f684ed767e1553315abd7b8494c04886cf3c0b6e2d484eb0ee8928e6f1c7d83bc67e1d21bc3fe583cde
- SSDEEP
  
  768:NVDz8MMXzk+npS7cBOETqWLTXQuRVmeLJzaZjPLh:Np2k+npS0OETqW/dvzaZHh
Score

7^/10

spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2