39269788a55f91dd75451a56bb0a78dfdb4b54e8bda0b45dab78c89ddf4b00b4 | Triage

Sharing

General

Target

6298b6f4fe79d425964f13c1a1a315e0N.exe
Size

1.4MB
Sample

240721-ep3ycswdlp
MD5

6298b6f4fe79d425964f13c1a1a315e0
SHA1

2ea1e03a41338761a0d486538d6dec5a5497f09e
SHA256

39269788a55f91dd75451a56bb0a78dfdb4b54e8bda0b45dab78c89ddf4b00b4
SHA512

471b16ea95033e84542b538a7d03ac2ba97137c031b42c39a202ade25e9a9ff2a4c958a4f351dbc20ea42bd8899a7d80469286af4b8c81d63adf4558118eef31
SSDEEP

24576:0/FKiBWMTv6+9bJGKl5XKjsck+hIw3/C3I2JOt934J7Z6bQaj1BvUm9J:qBWMTv6+9bJJTXKj3kzw3/C3zJE3jM21

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  6298b6f4fe79d425964f13c1a1a315e0N.exe
- Size
  
  1.4MB
- MD5
  
  6298b6f4fe79d425964f13c1a1a315e0
- SHA1
  
  2ea1e03a41338761a0d486538d6dec5a5497f09e
- SHA256
  
  39269788a55f91dd75451a56bb0a78dfdb4b54e8bda0b45dab78c89ddf4b00b4
- SHA512
  
  471b16ea95033e84542b538a7d03ac2ba97137c031b42c39a202ade25e9a9ff2a4c958a4f351dbc20ea42bd8899a7d80469286af4b8c81d63adf4558118eef31
- SSDEEP
  
  24576:0/FKiBWMTv6+9bJGKl5XKjsck+hIw3/C3I2JOt934J7Z6bQaj1BvUm9J:qBWMTv6+9bJJTXKj3kzw3/C3zJE3jM21
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2