56865d72e5e7b436aec829d58ba984234398c1c5ab0f3d3f982a7504ab51296b | Triage

Sharing

General

Target

56865d72e5e7b436aec829d58ba984234398c1c5ab0f3d3f982a7504ab51296b
Size

236KB
Sample

240720-k9pt5azalg
MD5

4d463efcc28c8f58964f96d9d0aae51b
SHA1

d30bdeb667a15dfef12679fc0ff17dbf1408e137
SHA256

56865d72e5e7b436aec829d58ba984234398c1c5ab0f3d3f982a7504ab51296b
SHA512

a6575631f547d1af9e7505d50a335600dfe693df096aa0609811f62a1154b70a7a4b751311b68ea451afdbb708732511d997b659233e161f51ab28e59851fe74
SSDEEP

3072:QnwkGoettaFDy7LIPNpd6I1q6CrJw3lYUx6VwQ7Y0CX5ajLnqUSJu:RoedLCpd60arKlhAVwIOqLE

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  56865d72e5e7b436aec829d58ba984234398c1c5ab0f3d3f982a7504ab51296b
- Size
  
  236KB
- MD5
  
  4d463efcc28c8f58964f96d9d0aae51b
- SHA1
  
  d30bdeb667a15dfef12679fc0ff17dbf1408e137
- SHA256
  
  56865d72e5e7b436aec829d58ba984234398c1c5ab0f3d3f982a7504ab51296b
- SHA512
  
  a6575631f547d1af9e7505d50a335600dfe693df096aa0609811f62a1154b70a7a4b751311b68ea451afdbb708732511d997b659233e161f51ab28e59851fe74
- SSDEEP
  
  3072:QnwkGoettaFDy7LIPNpd6I1q6CrJw3lYUx6VwQ7Y0CX5ajLnqUSJu:RoedLCpd60arKlhAVwIOqLE
Score

7^/10

spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2