5e2839553458547a92fff7348862063b30510e805a550e02d94a89bd8fd0768d | Triage

Sharing

General

Target

SecuriteInfo.com.FileRepMalware.25938.2401.exe
Size

1.7MB
Sample

240709-ex5rxswbpk
MD5

4640faeafa95ce219c649e9f5cbffd75
SHA1

19dd0e5c193e679825066ea9faa8c283a3d62cdd
SHA256

5e2839553458547a92fff7348862063b30510e805a550e02d94a89bd8fd0768d
SHA512

23e9c70521be23aeb74da4711149e6a61d678713dbfd6de7a5f835bd2931ad227a8988ab66d6a44d1b7f83b8e8cea23fef0f6ed4c2c3399b214bd812dfc998cb
SSDEEP

49152:ROG8g1q+0zLvddLpmLM1vkRG6PDaChedUaq4UL:Mzdg

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  SecuriteInfo.com.FileRepMalware.25938.2401.exe
- Size
  
  1.7MB
- MD5
  
  4640faeafa95ce219c649e9f5cbffd75
- SHA1
  
  19dd0e5c193e679825066ea9faa8c283a3d62cdd
- SHA256
  
  5e2839553458547a92fff7348862063b30510e805a550e02d94a89bd8fd0768d
- SHA512
  
  23e9c70521be23aeb74da4711149e6a61d678713dbfd6de7a5f835bd2931ad227a8988ab66d6a44d1b7f83b8e8cea23fef0f6ed4c2c3399b214bd812dfc998cb
- SSDEEP
  
  49152:ROG8g1q+0zLvddLpmLM1vkRG6PDaChedUaq4UL:Mzdg
Score

7^/10

spyware stealer
- Reads WinSCP keys stored on the system
  Tries to access WinSCP stored sessions.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Credentials in Registry

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2