624b8a65cbeeb9a10635a297970cacb4a2c43a1c50d92900b71bc5249adec01e | Triage

Sharing

General

Target

624b8a65cbeeb9a10635a297970cacb4a2c43a1c50d92900b71bc5249adec01e
Size

6.4MB
Sample

240819-qvd2zawhmb
MD5

8947f3e99f8e87418cfa12b68df1d517
SHA1

24eb725c90c62edad45439321392aa8a13aef65f
SHA256

624b8a65cbeeb9a10635a297970cacb4a2c43a1c50d92900b71bc5249adec01e
SHA512

8c8c907f8444eaaf6aa6242d3228115f8456ff825af84ecb5a215a233f1df2dfab11ce8c879f8e528038a0e317f37783d94dc23db9254015fc829602fddad082
SSDEEP

98304:29TuOQrltBAFyj6z5vlcDJ5oYOkm/SsptqSpzzOKNt:29aTrlTEyOplc9DOtvtX9nNt

Score

9^/10

credential_access discovery spyware stealer

Malware Config

Targets

- Target
  
  624b8a65cbeeb9a10635a297970cacb4a2c43a1c50d92900b71bc5249adec01e
- Size
  
  6.4MB
- MD5
  
  8947f3e99f8e87418cfa12b68df1d517
- SHA1
  
  24eb725c90c62edad45439321392aa8a13aef65f
- SHA256
  
  624b8a65cbeeb9a10635a297970cacb4a2c43a1c50d92900b71bc5249adec01e
- SHA512
  
  8c8c907f8444eaaf6aa6242d3228115f8456ff825af84ecb5a215a233f1df2dfab11ce8c879f8e528038a0e317f37783d94dc23db9254015fc829602fddad082
- SSDEEP
  
  98304:29TuOQrltBAFyj6z5vlcDJ5oYOkm/SsptqSpzzOKNt:29aTrlTEyOplc9DOtvtX9nNt
Score

9^/10

credential_access discovery spyware stealer
- Credentials from Password Stores: Credentials from Web Browsers
  Malicious Access or copy of Web Browser Credential store.
  credential_access stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

credential_accessdiscoveryspywarestealer

behavioral2

credential_accessdiscoveryspywarestealer