povertystealer | 194247b2d4724928446b4cdea53167be6cf0ebd60858ca0c2d4bdc6cdb5a4c54 | Triage

Sharing

General

Target

MetaTrader.exe
Size

29KB
Sample

250307-ttqadstl15
MD5

ff47b6c78043112f3fbb2aabcea02342
SHA1

c4ed40140c5a56bb2d5d09dbcd683980eea7e59c
SHA256

194247b2d4724928446b4cdea53167be6cf0ebd60858ca0c2d4bdc6cdb5a4c54
SHA512

4699036962c5f14ad42fb32f6f5c7e13dad2b57023b0efcfafd2a9c698d44f1e704b5f62fd176ff85cecab09cf236d9a7aa778e3054d0452d0b2752c2e495366
SSDEEP

384:piY/4mcwYPSNOjKjg11+rVlOxxtNP97kJkgQ8pwIIumVbgORBprjlJZpTJ3uPbHM:piWWjjKjrOFgwItmVsOlr1B+9I/

Score

10^/10

povertystealer discovery spyware stealer

Malware Config

Targets

- Target
  
  MetaTrader.exe
- Size
  
  29KB
- MD5
  
  ff47b6c78043112f3fbb2aabcea02342
- SHA1
  
  c4ed40140c5a56bb2d5d09dbcd683980eea7e59c
- SHA256
  
  194247b2d4724928446b4cdea53167be6cf0ebd60858ca0c2d4bdc6cdb5a4c54
- SHA512
  
  4699036962c5f14ad42fb32f6f5c7e13dad2b57023b0efcfafd2a9c698d44f1e704b5f62fd176ff85cecab09cf236d9a7aa778e3054d0452d0b2752c2e495366
- SSDEEP
  
  384:piY/4mcwYPSNOjKjg11+rVlOxxtNP97kJkgQ8pwIIumVbgORBprjlJZpTJ3uPbHM:piWWjjKjrOFgwItmVsOlr1B+9I/
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer