81e79780ebce9ed8d2f1c9b13026befa523681d181ae95ae3d96693e0e3c9aec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81e79780ebce9ed8d2f1c9b13026befa523681d181ae95ae3d96693e0e3c9aec
Size

2.6MB
Sample

240711-gtd6xavdra
MD5

39ab6e21a8e37d74f2fb95677696c737
SHA1

b5fe059fb5b6f14b999098d5e6281861d2b93fe8
SHA256

81e79780ebce9ed8d2f1c9b13026befa523681d181ae95ae3d96693e0e3c9aec
SHA512

c6e4b446970a8bcd3bb316cc03c5037079712dde9224f9f8a2d1eceabf466cce40ba575c1883d73e8be1a6e8c91454f6ffed4063106f3506eaab2b2c4550713a
SSDEEP

49152:e+IbEyl8KKC6lxCzZh4DMjFcM1hxu8KuuCxFEpXhEQTZ1lsc07PnO5/cN+ZJrxcX:3GEvC6lxCzZh4Di11hxuC9xw2nO5UN+I

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  81e79780ebce9ed8d2f1c9b13026befa523681d181ae95ae3d96693e0e3c9aec
- Size
  
  2.6MB
- MD5
  
  39ab6e21a8e37d74f2fb95677696c737
- SHA1
  
  b5fe059fb5b6f14b999098d5e6281861d2b93fe8
- SHA256
  
  81e79780ebce9ed8d2f1c9b13026befa523681d181ae95ae3d96693e0e3c9aec
- SHA512
  
  c6e4b446970a8bcd3bb316cc03c5037079712dde9224f9f8a2d1eceabf466cce40ba575c1883d73e8be1a6e8c91454f6ffed4063106f3506eaab2b2c4550713a
- SSDEEP
  
  49152:e+IbEyl8KKC6lxCzZh4DMjFcM1hxu8KuuCxFEpXhEQTZ1lsc07PnO5/cN+ZJrxcX:3GEvC6lxCzZh4Di11hxuC9xw2nO5UN+I
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2