b78379e7a6f87eb00b81ad6093139937321a98daaa951084c457299c3056f4d5 | Triage

Sharing

General

Target

akame_decrypted.exe
Size

13.7MB
Sample

240721-qq7tgsvakl
MD5

11fc9182112b0eb4eb8a1cb91b1af3eb
SHA1

161dc9a87837fcafd336532e27adcfb9049b42db
SHA256

b78379e7a6f87eb00b81ad6093139937321a98daaa951084c457299c3056f4d5
SHA512

ad578b24fcb810beeb74dd2156d46af4d463bdd178ddc327825d887bcef930737a3bfbda51e1639c27b6374bce722c796ea4865a49e776b0dcfbb8d1f87a657f
SSDEEP

393216:REk2AIB1+TtIiFU8uARuAEFXm1qRreEjTFyMCCH:RkB1QtId8uAU7RKEnFyM7

Score

7^/10

pyinstaller spyware stealer

Malware Config

Targets

- Target
  
  akame_decrypted.exe
- Size
  
  13.7MB
- MD5
  
  11fc9182112b0eb4eb8a1cb91b1af3eb
- SHA1
  
  161dc9a87837fcafd336532e27adcfb9049b42db
- SHA256
  
  b78379e7a6f87eb00b81ad6093139937321a98daaa951084c457299c3056f4d5
- SHA512
  
  ad578b24fcb810beeb74dd2156d46af4d463bdd178ddc327825d887bcef930737a3bfbda51e1639c27b6374bce722c796ea4865a49e776b0dcfbb8d1f87a657f
- SSDEEP
  
  393216:REk2AIB1+TtIiFU8uARuAEFXm1qRreEjTFyMCCH:RkB1QtId8uAU7RKEnFyM7
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Process Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1