d88f141f569e611b4d697ecd3923355ea85d03b7a249bda4b3124928b21bfb2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d88f141f569e611b4d697ecd3923355ea85d03b7a249bda4b3124928b21bfb2a
Size

71KB
Sample

240615-c78v8azgqk
MD5

8e5fd357704e4f77d1aa26688fa4b034
SHA1

589756ed26b321ef47fbca21ca26ffd7a28b67e4
SHA256

d88f141f569e611b4d697ecd3923355ea85d03b7a249bda4b3124928b21bfb2a
SHA512

eb4516a724fdd89a02eefa76dac3dd86108a708ada95ddfe80047a32bd57a058365b2cccadaaddd9a609b7f1de77bb1d52e0291ea9075d81624889f77eb7e6fa
SSDEEP

1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTxO:ZRpAyazIliazTE

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  d88f141f569e611b4d697ecd3923355ea85d03b7a249bda4b3124928b21bfb2a
- Size
  
  71KB
- MD5
  
  8e5fd357704e4f77d1aa26688fa4b034
- SHA1
  
  589756ed26b321ef47fbca21ca26ffd7a28b67e4
- SHA256
  
  d88f141f569e611b4d697ecd3923355ea85d03b7a249bda4b3124928b21bfb2a
- SHA512
  
  eb4516a724fdd89a02eefa76dac3dd86108a708ada95ddfe80047a32bd57a058365b2cccadaaddd9a609b7f1de77bb1d52e0291ea9075d81624889f77eb7e6fa
- SSDEEP
  
  1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTxO:ZRpAyazIliazTE
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer