ff883874e08e4f5e12656d62d9a6d500bc034c53162106f6d62ba6cd4540e7f3 | Triage

Sharing

General

Target

d26d7bc20b2e7f1def79c5362cee6ec0N.exe
Size

638KB
Sample

240715-nx6tnaxfnc
MD5

d26d7bc20b2e7f1def79c5362cee6ec0
SHA1

23c254725ae6e2f01ebe1563d0c475abeedbbfd1
SHA256

ff883874e08e4f5e12656d62d9a6d500bc034c53162106f6d62ba6cd4540e7f3
SHA512

02297ee6f28bcc7efad287de98fb833f502d607b4e93cba52bd924b3b4876d41ebf666f1c00c8ea83fd7c488840fd88706ad495281161c2718ce7b843b3a29df
SSDEEP

12288:5t+p/SInr8vv2BDeT+bVYHTb3FRk/rMNxaXqqlPbJKTGv5DYFXOBnXREHa:zA/i328ab4F+rM/aXq6bJfBUam6

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  d26d7bc20b2e7f1def79c5362cee6ec0N.exe
- Size
  
  638KB
- MD5
  
  d26d7bc20b2e7f1def79c5362cee6ec0
- SHA1
  
  23c254725ae6e2f01ebe1563d0c475abeedbbfd1
- SHA256
  
  ff883874e08e4f5e12656d62d9a6d500bc034c53162106f6d62ba6cd4540e7f3
- SHA512
  
  02297ee6f28bcc7efad287de98fb833f502d607b4e93cba52bd924b3b4876d41ebf666f1c00c8ea83fd7c488840fd88706ad495281161c2718ce7b843b3a29df
- SSDEEP
  
  12288:5t+p/SInr8vv2BDeT+bVYHTb3FRk/rMNxaXqqlPbJKTGv5DYFXOBnXREHa:zA/i328ab4F+rM/aXq6bJfBUam6
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2