f132a5c70287246b6a99ad3c5a0f57a0ec42e1a14078f2d24212e97bedcf6878 | Triage

Sharing

General

Target

f132a5c70287246b6a99ad3c5a0f57a0ec42e1a14078f2d24212e97bedcf6878
Size

439KB
Sample

240701-e5a8aazbqp
MD5

baf0258af5ebcb9b1e20547193c99417
SHA1

f4f6ec34a68af717964e1cc5fa5abf4d12341b7d
SHA256

f132a5c70287246b6a99ad3c5a0f57a0ec42e1a14078f2d24212e97bedcf6878
SHA512

1a5a2b1cdf28aca540cc21a2d7964df8ca5930cf342104d8c6466033d0ab6511c8966cc4c02251b9e913190ef0756ed99d019f6536131674f9cf151c0cc63160
SSDEEP

12288:s3C9JvaIScAcySTDzeTWwSaKsuflz+cVWKtwAtsP/AZ9:oC9ktQTPeTWVRjLtwAeP/W

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  f132a5c70287246b6a99ad3c5a0f57a0ec42e1a14078f2d24212e97bedcf6878
- Size
  
  439KB
- MD5
  
  baf0258af5ebcb9b1e20547193c99417
- SHA1
  
  f4f6ec34a68af717964e1cc5fa5abf4d12341b7d
- SHA256
  
  f132a5c70287246b6a99ad3c5a0f57a0ec42e1a14078f2d24212e97bedcf6878
- SHA512
  
  1a5a2b1cdf28aca540cc21a2d7964df8ca5930cf342104d8c6466033d0ab6511c8966cc4c02251b9e913190ef0756ed99d019f6536131674f9cf151c0cc63160
- SSDEEP
  
  12288:s3C9JvaIScAcySTDzeTWwSaKsuflz+cVWKtwAtsP/AZ9:oC9ktQTPeTWVRjLtwAeP/W
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2