ddb1fdff1c6fd9995358143999047e10ace7e256757281fb54d48f4099058c77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddb1fdff1c6fd9995358143999047e10ace7e256757281fb54d48f4099058c77
Size

1.9MB
Sample

240703-eckw1swcpd
MD5

fdfdc220aad6a8e743c1c63bc369c79d
SHA1

d5e3cd616c799d401294cf4395741e21c7095923
SHA256

ddb1fdff1c6fd9995358143999047e10ace7e256757281fb54d48f4099058c77
SHA512

281643b3451449a22bcc50ec29237cfd99a4f88120fba968d9db064545e20ff26d018b57e9f9d1bc3ab181141c47d144690635edd51a69d335b356daea70fb4c
SSDEEP

24576:s78r8FfC3F32nUnCdAaKu++nO3TNjx+mZCkt76f/24pN+XNqNG6hditW:s/fQF37CGaP0f9Ckt7c20+9qNxUW

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  ddb1fdff1c6fd9995358143999047e10ace7e256757281fb54d48f4099058c77
- Size
  
  1.9MB
- MD5
  
  fdfdc220aad6a8e743c1c63bc369c79d
- SHA1
  
  d5e3cd616c799d401294cf4395741e21c7095923
- SHA256
  
  ddb1fdff1c6fd9995358143999047e10ace7e256757281fb54d48f4099058c77
- SHA512
  
  281643b3451449a22bcc50ec29237cfd99a4f88120fba968d9db064545e20ff26d018b57e9f9d1bc3ab181141c47d144690635edd51a69d335b356daea70fb4c
- SSDEEP
  
  24576:s78r8FfC3F32nUnCdAaKu++nO3TNjx+mZCkt76f/24pN+XNqNG6hditW:s/fQF37CGaP0f9Ckt7c20+9qNxUW
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1