ff10143803f39c6c08b2fbe846d990b92c6d1b71e27f89bca69ab9331945b14a | Triage

Resubmissions

16/01/2025, 11:50

250116-nzxc1aynhs 10

07/10/2024, 05:08

241007-fsmk8axfjl 7

Sharing

General

Target

ff10143803f39c6c08b2fbe846d990b92c6d1b71e27f89bca69ab9331945b14a
Size

9.5MB
Sample

241007-fsmk8axfjl
MD5

65f8f3a608e39c409491dd5bca3b4882
SHA1

7cfa9ee055424eb02c4a0bfab78d8824a73b2fea
SHA256

ff10143803f39c6c08b2fbe846d990b92c6d1b71e27f89bca69ab9331945b14a
SHA512

47a4caeca227a29dc756391e838d9119d381a6038737883b7910489d97668f0b152ff8e068290b4d2d58a0203cd4c6cbf68cabefd2a2819f0ca584d4b9bc2b23
SSDEEP

49152:CxiATy66MxEIflnd9VlNPGOtSeO+3nXn0Ext9V6qrzDTAQg0JZ+Wm+vfYM8sF1l9:ayFMPtPVlVGO

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  ff10143803f39c6c08b2fbe846d990b92c6d1b71e27f89bca69ab9331945b14a
- Size
  
  9.5MB
- MD5
  
  65f8f3a608e39c409491dd5bca3b4882
- SHA1
  
  7cfa9ee055424eb02c4a0bfab78d8824a73b2fea
- SHA256
  
  ff10143803f39c6c08b2fbe846d990b92c6d1b71e27f89bca69ab9331945b14a
- SHA512
  
  47a4caeca227a29dc756391e838d9119d381a6038737883b7910489d97668f0b152ff8e068290b4d2d58a0203cd4c6cbf68cabefd2a2819f0ca584d4b9bc2b23
- SSDEEP
  
  49152:CxiATy66MxEIflnd9VlNPGOtSeO+3nXn0Ext9V6qrzDTAQg0JZ+Wm+vfYM8sF1l9:ayFMPtPVlVGO
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer