8afff4c5affd8c2d91ce4b7630bd72898b6471dac37e35c6c3c1f0e43532749e | Triage

Sharing

General

Target

c0e92df492e400ed3de4cc7da3bde1f0N.exe
Size

321KB
Sample

240715-l3w6astdqa
MD5

c0e92df492e400ed3de4cc7da3bde1f0
SHA1

32a2e10cff7fcb3f0e618713aec18acdc01b2253
SHA256

8afff4c5affd8c2d91ce4b7630bd72898b6471dac37e35c6c3c1f0e43532749e
SHA512

0ac08ad3a0ae191c573bc8341158c595bebc23d97b642af34e6fccbea560a263d3ac0712a3b1e0ace1c009e78163069322a9b7e7af97b3aee5263080dc432acd
SSDEEP

6144:cRV2GBSGoOB/93Vihd24UNXJBo2N44vCl5g0YBSA+8+2ljWJ0tG1ZC9:cRdSoIks4ClFYv+Aje+

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  c0e92df492e400ed3de4cc7da3bde1f0N.exe
- Size
  
  321KB
- MD5
  
  c0e92df492e400ed3de4cc7da3bde1f0
- SHA1
  
  32a2e10cff7fcb3f0e618713aec18acdc01b2253
- SHA256
  
  8afff4c5affd8c2d91ce4b7630bd72898b6471dac37e35c6c3c1f0e43532749e
- SHA512
  
  0ac08ad3a0ae191c573bc8341158c595bebc23d97b642af34e6fccbea560a263d3ac0712a3b1e0ace1c009e78163069322a9b7e7af97b3aee5263080dc432acd
- SSDEEP
  
  6144:cRV2GBSGoOB/93Vihd24UNXJBo2N44vCl5g0YBSA+8+2ljWJ0tG1ZC9:cRdSoIks4ClFYv+Aje+
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2