6b6f98691ad3c5c01e11d627be9978d9df562c33b65ff0715426cdfd0f212f19 | Triage

Sharing

General

Target

Bootstrapper.exe
Size

923KB
Sample

240824-zcafhaxhld
MD5

343bb17960dc5c071314d0a44473ba64
SHA1

4eaa02287ba44b57ab159f8366d1abc45c8d7ba5
SHA256

6b6f98691ad3c5c01e11d627be9978d9df562c33b65ff0715426cdfd0f212f19
SHA512

7f145aeee8c73066d81ab0a5a798191495cd21f42c310b94df6c29524ff5fc12875f93afcdb888057497854a82e85822c072050abb4bc8b639b746c7641d5b8f
SSDEEP

12288:6/2DLTG5cGueGAZlyW9NRLKeDdWTdInZKgAOw/0u6b084sxE3jjVjmg+sjrYjHd1:ks9RwpNR9BZdLw/0PjvyjjhyHq

Score

9^/10

credential_access discovery stealer

Malware Config

Targets

- Target
  
  Bootstrapper.exe
- Size
  
  923KB
- MD5
  
  343bb17960dc5c071314d0a44473ba64
- SHA1
  
  4eaa02287ba44b57ab159f8366d1abc45c8d7ba5
- SHA256
  
  6b6f98691ad3c5c01e11d627be9978d9df562c33b65ff0715426cdfd0f212f19
- SHA512
  
  7f145aeee8c73066d81ab0a5a798191495cd21f42c310b94df6c29524ff5fc12875f93afcdb888057497854a82e85822c072050abb4bc8b639b746c7641d5b8f
- SSDEEP
  
  12288:6/2DLTG5cGueGAZlyW9NRLKeDdWTdInZKgAOw/0u6b084sxE3jjVjmg+sjrYjHd1:ks9RwpNR9BZdLw/0PjvyjjhyHq
Score

9^/10

discovery credential_access stealer
- Credentials from Password Stores: Credentials from Web Browsers
  Malicious Access or copy of Web Browser Credential store.
  credential_access stealer
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

credential_accessdiscoverystealer