bc5fbfe0bcfadf20b297b1abd2216a1da630735172a0bc71e39c8f8f87faa7e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccec5fa4f1fabb6e926d07b802c4f9ce.bin
Size

96KB
Sample

240708-eg1g9s1elk
MD5

ccec5fa4f1fabb6e926d07b802c4f9ce
SHA1

90e906b9dbf8fcb1016db5dbcc4a563efd39b86c
SHA256

bc5fbfe0bcfadf20b297b1abd2216a1da630735172a0bc71e39c8f8f87faa7e9
SHA512

3d72154cf08431a74edecd2bb15f36a204894b6fd13a9150950c916a189e8fc4bc284234d82e2a1fefa86989361240e949119fe2ea72f0790e4359d8fded8dd4
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTdtnJUoTney10VuCAa8bs:ZhpAyazIlyazTdtJt10Vvgs

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  ccec5fa4f1fabb6e926d07b802c4f9ce.bin
- Size
  
  96KB
- MD5
  
  ccec5fa4f1fabb6e926d07b802c4f9ce
- SHA1
  
  90e906b9dbf8fcb1016db5dbcc4a563efd39b86c
- SHA256
  
  bc5fbfe0bcfadf20b297b1abd2216a1da630735172a0bc71e39c8f8f87faa7e9
- SHA512
  
  3d72154cf08431a74edecd2bb15f36a204894b6fd13a9150950c916a189e8fc4bc284234d82e2a1fefa86989361240e949119fe2ea72f0790e4359d8fded8dd4
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTdtnJUoTney10VuCAa8bs:ZhpAyazIlyazTdtJt10Vvgs
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer