3913927c28b229070fe285c0367882167ab3c177898eaefe4dfb5c0e49e11fd3 | Triage

Sharing

General

Target

3913927c28b229070fe285c0367882167ab3c177898eaefe4dfb5c0e49e11fd3.exe
Size

384KB
Sample

250227-c5cp1a1yf1
MD5

6aff1cf520c23f6c40a35534a9bcd604
SHA1

16fe4aea79f7cb4cfbd8205598b314fe771ad3e5
SHA256

3913927c28b229070fe285c0367882167ab3c177898eaefe4dfb5c0e49e11fd3
SHA512

466b75c85d794503854faf9677f06ef23b2ba51d6443621558f95374355b54d2cc5c629925cdb06cd7da1de12432e9b8352c6a5c0b010301e99b1d32b8b6993c
SSDEEP

6144:kHvy5ZuubTep1YIiK95v+V31NaQMSen1OUqB4iA3PPntPyEifV1U9FbbQmi2kT98:kHq5zepSKD8rdI19qBgHtPyv0TXQmi29

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  3913927c28b229070fe285c0367882167ab3c177898eaefe4dfb5c0e49e11fd3.exe
- Size
  
  384KB
- MD5
  
  6aff1cf520c23f6c40a35534a9bcd604
- SHA1
  
  16fe4aea79f7cb4cfbd8205598b314fe771ad3e5
- SHA256
  
  3913927c28b229070fe285c0367882167ab3c177898eaefe4dfb5c0e49e11fd3
- SHA512
  
  466b75c85d794503854faf9677f06ef23b2ba51d6443621558f95374355b54d2cc5c629925cdb06cd7da1de12432e9b8352c6a5c0b010301e99b1d32b8b6993c
- SSDEEP
  
  6144:kHvy5ZuubTep1YIiK95v+V31NaQMSen1OUqB4iA3PPntPyEifV1U9FbbQmi2kT98:kHq5zepSKD8rdI19qBgHtPyv0TXQmi29
Score

7^/10

discovery spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer