e3879964e0decd2f01b2754cc7b31c210555c92e9974e7a927ad8fac227653aa | Triage

Sharing

General

Target

e3879964e0decd2f01b2754cc7b31c210555c92e9974e7a927ad8fac227653aa
Size

1.3MB
Sample

240707-pd344athrb
MD5

eb4cfe43e03733cdeb8d580631e30891
SHA1

a0ee6b7410f635e3fde71c87c39250678c1eb3a2
SHA256

e3879964e0decd2f01b2754cc7b31c210555c92e9974e7a927ad8fac227653aa
SHA512

cda29aa914442f3f540921be1872a828499a9fc5306a70834976cf4dd257ea055d2b0af5bf9b7cdd6f2b23a21e9f618c6bb368a9f13c15d08349bebec7470bfe
SSDEEP

12288:1EiB+t0qUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8:1EiBXqatr0zAiX90z/F0jsFB3SQk

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  e3879964e0decd2f01b2754cc7b31c210555c92e9974e7a927ad8fac227653aa
- Size
  
  1.3MB
- MD5
  
  eb4cfe43e03733cdeb8d580631e30891
- SHA1
  
  a0ee6b7410f635e3fde71c87c39250678c1eb3a2
- SHA256
  
  e3879964e0decd2f01b2754cc7b31c210555c92e9974e7a927ad8fac227653aa
- SHA512
  
  cda29aa914442f3f540921be1872a828499a9fc5306a70834976cf4dd257ea055d2b0af5bf9b7cdd6f2b23a21e9f618c6bb368a9f13c15d08349bebec7470bfe
- SSDEEP
  
  12288:1EiB+t0qUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8:1EiBXqatr0zAiX90z/F0jsFB3SQk
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2