a5fbf425bb6bd057df4af88672083abd57eb9f46babefb8d9379a0fba4357213 | Triage

Sharing

General

Target

060fec86bc08ee80f2a9781605b113f0N
Size

1.2MB
Sample

240915-ng1byasarl
MD5

060fec86bc08ee80f2a9781605b113f0
SHA1

de629a6f60b74870a8b2fae3e364d1279944b0a4
SHA256

a5fbf425bb6bd057df4af88672083abd57eb9f46babefb8d9379a0fba4357213
SHA512

02e478a61fb365f41a7ec8ef1652f1d07c1c9c8faaf9f9a3022bb1e6f708605f2eabff25803b78cc60cbb413366749a6dd3820942c8a89ab6cc5c1da9081ade0
SSDEEP

12288:WI4MNid5wwCjMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:Wz5dlPSkQ/7Gb8NLEbeZ

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  060fec86bc08ee80f2a9781605b113f0N
- Size
  
  1.2MB
- MD5
  
  060fec86bc08ee80f2a9781605b113f0
- SHA1
  
  de629a6f60b74870a8b2fae3e364d1279944b0a4
- SHA256
  
  a5fbf425bb6bd057df4af88672083abd57eb9f46babefb8d9379a0fba4357213
- SHA512
  
  02e478a61fb365f41a7ec8ef1652f1d07c1c9c8faaf9f9a3022bb1e6f708605f2eabff25803b78cc60cbb413366749a6dd3820942c8a89ab6cc5c1da9081ade0
- SSDEEP
  
  12288:WI4MNid5wwCjMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:Wz5dlPSkQ/7Gb8NLEbeZ
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer