7d0541dad72de033a246df3271fdf184d747717edefd44dd4dd38df31c59dc19 | Triage

Sharing

General

Target

imagefilestodiscord.exe
Size

71.0MB
Sample

241030-3sea6sthlj
MD5

bd87e006b624e73b0f3976f4add97cd4
SHA1

d41ded1498b6b5795256a0ec8df4de8fadaced39
SHA256

7d0541dad72de033a246df3271fdf184d747717edefd44dd4dd38df31c59dc19
SHA512

4e9a18f81517cf3d9f93a0f4e06bdc3c10ed41f2778348b3c1ebd8662095a03ab7b8b4fdf03e23c0d5610a0756e798c8bb5a0a9fc166119c5740fcb5e657838c
SSDEEP

1572864:a6j01CpyJE/SZ56W9jqKVqWTNOXWxtQSNjGqFOPV5GiIJ2qHWB75iVB6Um:fj7psUysW9j3qWTcKCsGPrcJ2qHO5iV4

Score

7^/10

pyinstaller spyware stealer

Malware Config

Targets

- Target
  
  imagefilestodiscord.exe
- Size
  
  71.0MB
- MD5
  
  bd87e006b624e73b0f3976f4add97cd4
- SHA1
  
  d41ded1498b6b5795256a0ec8df4de8fadaced39
- SHA256
  
  7d0541dad72de033a246df3271fdf184d747717edefd44dd4dd38df31c59dc19
- SHA512
  
  4e9a18f81517cf3d9f93a0f4e06bdc3c10ed41f2778348b3c1ebd8662095a03ab7b8b4fdf03e23c0d5610a0756e798c8bb5a0a9fc166119c5740fcb5e657838c
- SSDEEP
  
  1572864:a6j01CpyJE/SZ56W9jqKVqWTNOXWxtQSNjGqFOPV5GiIJ2qHWB75iVB6Um:fj7psUysW9j3qWTcKCsGPrcJ2qHO5iV4
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1