7f512c87bcfaa7b86f8f8ff6f229524f67517627f7775cb61d56f8af2ba44c6a | Triage

Sharing

General

Target

6509ed83c780acd2f8d737c0cfdc15f0N.exe
Size

441KB
Sample

240721-eyg29awejr
MD5

6509ed83c780acd2f8d737c0cfdc15f0
SHA1

ce35251a8d9e4bbfed96dbfa819f59db5995dac8
SHA256

7f512c87bcfaa7b86f8f8ff6f229524f67517627f7775cb61d56f8af2ba44c6a
SHA512

4041c7def8b17c9fca234cafafb466641ee464455f1a057bbf3dbf10745caa679bf366f7e7624612b3c6cd5d6fa1a1e17e1bb43f4b075bdd5b4661a8bddce81c
SSDEEP

12288:1hyBWYPytgLvJTR/hujfTCa16papXFII:1O7PVTRhujbCVpsII

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  6509ed83c780acd2f8d737c0cfdc15f0N.exe
- Size
  
  441KB
- MD5
  
  6509ed83c780acd2f8d737c0cfdc15f0
- SHA1
  
  ce35251a8d9e4bbfed96dbfa819f59db5995dac8
- SHA256
  
  7f512c87bcfaa7b86f8f8ff6f229524f67517627f7775cb61d56f8af2ba44c6a
- SHA512
  
  4041c7def8b17c9fca234cafafb466641ee464455f1a057bbf3dbf10745caa679bf366f7e7624612b3c6cd5d6fa1a1e17e1bb43f4b075bdd5b4661a8bddce81c
- SSDEEP
  
  12288:1hyBWYPytgLvJTR/hujfTCa16papXFII:1O7PVTRhujbCVpsII
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2