296d5a4b7ae49389992d8add8334681d9cb7fa31b720a32eecc26ee070c206a6 | Triage

Sharing

General

Target

296d5a4b7ae49389992d8add8334681d9cb7fa31b720a32eecc26ee070c206a6
Size

1.1MB
Sample

241120-rxgrbayejp
MD5

c1e014f2ce7a49094fb694028207292a
SHA1

0f9e70be8da2df949be128b8c40c79f0be68cc2f
SHA256

296d5a4b7ae49389992d8add8334681d9cb7fa31b720a32eecc26ee070c206a6
SHA512

bdb1a010257c76f8e2ea48c3887bab68bcb798012cc8642e975042e041ad961c3f46871f149da2543f35c311c91343e8b2c55f7817373f8b7c173551ff16d6fc
SSDEEP

24576:kp9mNaOPOeZ4ZRQVxj3kWO1pgkysLbIqBcDu5GY/Hj4coCYHb0YLVU5:Qvy4ZRQVZkDIqBR5GY/HUcophO5

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  296d5a4b7ae49389992d8add8334681d9cb7fa31b720a32eecc26ee070c206a6
- Size
  
  1.1MB
- MD5
  
  c1e014f2ce7a49094fb694028207292a
- SHA1
  
  0f9e70be8da2df949be128b8c40c79f0be68cc2f
- SHA256
  
  296d5a4b7ae49389992d8add8334681d9cb7fa31b720a32eecc26ee070c206a6
- SHA512
  
  bdb1a010257c76f8e2ea48c3887bab68bcb798012cc8642e975042e041ad961c3f46871f149da2543f35c311c91343e8b2c55f7817373f8b7c173551ff16d6fc
- SSDEEP
  
  24576:kp9mNaOPOeZ4ZRQVxj3kWO1pgkysLbIqBcDu5GY/Hj4coCYHb0YLVU5:Qvy4ZRQVZkDIqBR5GY/HUcophO5
Score

7^/10

discovery spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer