b292bc1fb131acfeca703a4b5dc5fd41303a0fad42afa9d8361ebcb3106419b8 | Triage

Sharing

General

Target

b292bc1fb131acfeca703a4b5dc5fd41303a0fad42afa9d8361ebcb3106419b8
Size

5.8MB
Sample

241010-l4le7aygnl
MD5

f0b1d52fba9beba551c737b91d8b6020
SHA1

b6910d042ffeefe80787b0539f20a16688a0f1d5
SHA256

b292bc1fb131acfeca703a4b5dc5fd41303a0fad42afa9d8361ebcb3106419b8
SHA512

37810bd7f0e76e835cacee3bc7674bb9e675111515521da7b86ebc3110d0c4be2a4d4725487fdefafe004b6e8554e9fcd3f844808d1fdb72c0daad6d08ea4eaf
SSDEEP

98304:9BzZxajF0kyICd+PefMsJGu2btutsZIEsrJntZArNYFsJEp:9ECFfMsJGIsKp

Score

7^/10

credential_access discovery spyware stealer

Malware Config

Targets

- Target
  
  b292bc1fb131acfeca703a4b5dc5fd41303a0fad42afa9d8361ebcb3106419b8
- Size
  
  5.8MB
- MD5
  
  f0b1d52fba9beba551c737b91d8b6020
- SHA1
  
  b6910d042ffeefe80787b0539f20a16688a0f1d5
- SHA256
  
  b292bc1fb131acfeca703a4b5dc5fd41303a0fad42afa9d8361ebcb3106419b8
- SHA512
  
  37810bd7f0e76e835cacee3bc7674bb9e675111515521da7b86ebc3110d0c4be2a4d4725487fdefafe004b6e8554e9fcd3f844808d1fdb72c0daad6d08ea4eaf
- SSDEEP
  
  98304:9BzZxajF0kyICd+PefMsJGu2btutsZIEsrJntZArNYFsJEp:9ECFfMsJGIsKp
Score

7^/10

credential_access discovery spyware stealer
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Windows Credential Manager

Unsecured Credentials

Credentials In Files

Discovery

Browser Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

credential_accessdiscoveryspywarestealer

behavioral2

credential_accessdiscoveryspywarestealer