46a29e3a04b8b2cd20c210b6486f71dd24eb2379928353cff2e95854dbd9035f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46a29e3a04b8b2cd20c210b6486f71dd24eb2379928353cff2e95854dbd9035f.exe
Size

80KB
Sample

240705-m9e12axclp
MD5

127b331ac21e5c011813029109d69e90
SHA1

42d547e2287fb047c46154d42af3a148c1945342
SHA256

46a29e3a04b8b2cd20c210b6486f71dd24eb2379928353cff2e95854dbd9035f
SHA512

ce47e281bb005871b62198750970acf89decf6e17026b38429b9c525af27c2e2b9a1fa70724c41c12ab2d1d7a764b888342eef9e1c619f7a0570462c90a3c1d4
SSDEEP

1536:ljj3x85+Ks2HY0oMs6QOht/n6nuDaFqUpibvr0+ayQzM+vnzcYRe8:9jh85+KsOY0oM13htP+QUpibz0+hQzrT

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  46a29e3a04b8b2cd20c210b6486f71dd24eb2379928353cff2e95854dbd9035f.exe
- Size
  
  80KB
- MD5
  
  127b331ac21e5c011813029109d69e90
- SHA1
  
  42d547e2287fb047c46154d42af3a148c1945342
- SHA256
  
  46a29e3a04b8b2cd20c210b6486f71dd24eb2379928353cff2e95854dbd9035f
- SHA512
  
  ce47e281bb005871b62198750970acf89decf6e17026b38429b9c525af27c2e2b9a1fa70724c41c12ab2d1d7a764b888342eef9e1c619f7a0570462c90a3c1d4
- SSDEEP
  
  1536:ljj3x85+Ks2HY0oMs6QOht/n6nuDaFqUpibvr0+ayQzM+vnzcYRe8:9jh85+KsOY0oM13htP+QUpibz0+hQzrT
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer