c86d526db372f26675e018376b67d9b5abc6422a8f48700f5e0029f3f4a40366 | Triage

Sharing

General

Target

c86d526db372f26675e018376b67d9b5abc6422a8f48700f5e0029f3f4a40366
Size

17KB
Sample

240615-l9z6jawhpb
MD5

276e0fe9b45058bd85111ddd746e2e46
SHA1

e90528da02224d544f12d23ac9fa39f57f0ed953
SHA256

c86d526db372f26675e018376b67d9b5abc6422a8f48700f5e0029f3f4a40366
SHA512

cc9812e37f3603ce020a997277d5a3781702d4d2d3ea18edeebb674ca64a17704b62748bc752e73c764b036cba66f9fbcc14286d667708b9be0cd4c7b8b7e3c2
SSDEEP

384:WWjjfoQ+DfYMzKdPEsOuubuEG3KHM2/vofW:ljjAQ+BzWPEwnE+KHM2/B

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  c86d526db372f26675e018376b67d9b5abc6422a8f48700f5e0029f3f4a40366
- Size
  
  17KB
- MD5
  
  276e0fe9b45058bd85111ddd746e2e46
- SHA1
  
  e90528da02224d544f12d23ac9fa39f57f0ed953
- SHA256
  
  c86d526db372f26675e018376b67d9b5abc6422a8f48700f5e0029f3f4a40366
- SHA512
  
  cc9812e37f3603ce020a997277d5a3781702d4d2d3ea18edeebb674ca64a17704b62748bc752e73c764b036cba66f9fbcc14286d667708b9be0cd4c7b8b7e3c2
- SSDEEP
  
  384:WWjjfoQ+DfYMzKdPEsOuubuEG3KHM2/vofW:ljjAQ+BzWPEwnE+KHM2/B
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer