1016e71f563a5e35ee3447f23e26d6d3fd3d060e68c7438b7e0dbab3be84c1f6 | Triage

Sharing

General

Target

1016e71f563a5e35ee3447f23e26d6d3fd3d060e68c7438b7e0dbab3be84c1f6.exe
Size

1.8MB
Sample

250204-zn4tgstkhn
MD5

0b1be100ce99d18f8a086af604bf7a83
SHA1

256d233c4d26ea4ccf1189fae9bb5b49c3fbcc83
SHA256

1016e71f563a5e35ee3447f23e26d6d3fd3d060e68c7438b7e0dbab3be84c1f6
SHA512

5a02d5b2dbf0c4acd53cc11a49853f30c256ceec35dc830f5d27a7f8a43922589e004d6b622492d3917a3832dec759b3e6e0ae1bb7b09cae892bf3b187d15a56
SSDEEP

24576:5xGtm1foa9ibJsaVLmY746UbOL0GASfHRYcRFQ+:5stmb9GNmY74HbOL0GAoYcTP

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  1016e71f563a5e35ee3447f23e26d6d3fd3d060e68c7438b7e0dbab3be84c1f6.exe
- Size
  
  1.8MB
- MD5
  
  0b1be100ce99d18f8a086af604bf7a83
- SHA1
  
  256d233c4d26ea4ccf1189fae9bb5b49c3fbcc83
- SHA256
  
  1016e71f563a5e35ee3447f23e26d6d3fd3d060e68c7438b7e0dbab3be84c1f6
- SHA512
  
  5a02d5b2dbf0c4acd53cc11a49853f30c256ceec35dc830f5d27a7f8a43922589e004d6b622492d3917a3832dec759b3e6e0ae1bb7b09cae892bf3b187d15a56
- SSDEEP
  
  24576:5xGtm1foa9ibJsaVLmY746UbOL0GASfHRYcRFQ+:5stmb9GNmY74HbOL0GAoYcTP
Score

7^/10

spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2