386fd423f01549c52f6af3f46891bff8de9440a1b6afabc558ab1285fcfa3f81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

330ed4d12e74bc503324dd9031647780N.exe
Size

89KB
Sample

240803-cfd7jatgph
MD5

330ed4d12e74bc503324dd9031647780
SHA1

977787e45b743d5aa99b1b1fd17fbfa57a568eb0
SHA256

386fd423f01549c52f6af3f46891bff8de9440a1b6afabc558ab1285fcfa3f81
SHA512

c887f13e706a6e38181e920a350077a132cb690a259772a1a70da8993045ba6fd6c2c4e770ad12f4cf48f740328dff5093f06ad3e43a4bda66b137e385c66178
SSDEEP

1536:t3x85+Ks20CSbfLEmCmoee89w2PCxkDw3cKxQ8CUNlmt46X6yMx:th85+Ksd1zNCJ7MWjNcX0x

Score

7^/10

discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  330ed4d12e74bc503324dd9031647780N.exe
- Size
  
  89KB
- MD5
  
  330ed4d12e74bc503324dd9031647780
- SHA1
  
  977787e45b743d5aa99b1b1fd17fbfa57a568eb0
- SHA256
  
  386fd423f01549c52f6af3f46891bff8de9440a1b6afabc558ab1285fcfa3f81
- SHA512
  
  c887f13e706a6e38181e920a350077a132cb690a259772a1a70da8993045ba6fd6c2c4e770ad12f4cf48f740328dff5093f06ad3e43a4bda66b137e385c66178
- SSDEEP
  
  1536:t3x85+Ks20CSbfLEmCmoee89w2PCxkDw3cKxQ8CUNlmt46X6yMx:th85+Ksd1zNCJ7MWjNcX0x
Score

7^/10

discovery persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealer

behavioral2

discoverypersistencespywarestealer