c6b12c28095e88c3518deef40a010668e4690e00ebf14219fb0e094123a002b8 | Triage

Sharing

General

Target

gtyh.exe
Size

5.8MB
Sample

250218-kj9rlsyqcp
MD5

6d5cebde81333a9a52af275d3bca0997
SHA1

0646f411acf97c8be18aab7cb781fa5ab3748be5
SHA256

c6b12c28095e88c3518deef40a010668e4690e00ebf14219fb0e094123a002b8
SHA512

8964f91f4114912e88d51ebb3577ea64fe456373e0a3c51cba20d6fbb76db21197222b5c9cd2801fc5ab8bc32bf46c8a345d1a62daed5db2beb8d7fb3d487db2
SSDEEP

98304:ug3hjD7tDygitl/uBqSpATRdvN4Co1+aiutddpttMVQepqKzqJkA:u67t2R/uBqSpAT1hoxtdqQFK+iA

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  gtyh.exe
- Size
  
  5.8MB
- MD5
  
  6d5cebde81333a9a52af275d3bca0997
- SHA1
  
  0646f411acf97c8be18aab7cb781fa5ab3748be5
- SHA256
  
  c6b12c28095e88c3518deef40a010668e4690e00ebf14219fb0e094123a002b8
- SHA512
  
  8964f91f4114912e88d51ebb3577ea64fe456373e0a3c51cba20d6fbb76db21197222b5c9cd2801fc5ab8bc32bf46c8a345d1a62daed5db2beb8d7fb3d487db2
- SSDEEP
  
  98304:ug3hjD7tDygitl/uBqSpATRdvN4Co1+aiutddpttMVQepqKzqJkA:u67t2R/uBqSpAT1hoxtdqQFK+iA
Score

7^/10

discovery spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer