052378136b83738e481a49a98fdf007336b05676df6af79f623c5b579ad1b7be

General

Target
Spotify.rar
Size 22.5MB
Sample261104-y3myvavset
SHA256 052378136b83738e481a49a98fdf007336b05676df6af79f623c5b579ad1b7be
MD5 edd4e55c85158d6b834f766913d1fe1e
SHA1 6c05a289e0d681a324a7bfdad86a73cce4d109a3
SHA512 e87fbd5c4c41dd5fad9678f146dde14ea47d273c95ae50af58c5fef7f1e14076d65a5157212cfe57c1fcc1115415b1b8d801d867eac494b8cf23fe08756cea32
SSDEEP 393216:ynSDTRJBK4W/a0V5+LObuYM2X3zkIFYB7nUuE9Fm3VuAzJ34CaD69AL6JNCJ8Rv0:ySDTBBW/aEHyNw0UuE9U3Vu6J3KD628u
TLSH
T13B3733656510A14628546E893ED1DA2779E31BE06C37CC7A68FC9CD3DE3326C2A3F607
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Spotify.rar
- Size 22.5MB
- SHA256 052378136b83738e481a49a98fdf007336b05676df6af79f623c5b579ad1b7be
- MD5 edd4e55c85158d6b834f766913d1fe1e
- SHA1 6c05a289e0d681a324a7bfdad86a73cce4d109a3
- SHA512 e87fbd5c4c41dd5fad9678f146dde14ea47d273c95ae50af58c5fef7f1e14076d65a5157212cfe57c1fcc1115415b1b8d801d867eac494b8cf23fe08756cea32
- SSDEEP 393216:ynSDTRJBK4W/a0V5+LObuYM2X3zkIFYB7nUuE9Fm3VuAzJ34CaD69AL6JNCJ8Rv0:ySDTBBW/aEHyNw0UuE9U3Vu6J3KD628u
- TLSH
  T13B3733656510A14628546E893ED1DA2779E31BE06C37CC7A68FC9CD3DE3326C2A3F607
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

credential_access defense_evasion discovery stealer trojan
- Uses browser remote debugging
  Can be used to control the browser and steal sensitive information such as credentials and session cookies.
  credential_access stealer
- Executes dropped EXE
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  Spotify.exe
- Size 22.1MB
- SHA256 8faf9ebc7b5171ee5000d464d68a69c1119b883eaae4cbed3d748ae27b2bdb94
- MD5 4d7c9c1744b7b64a00378737eaae90ab
- SHA1 23fa160139867030d3d2969896b096f363756c47
- SHA512 6678007d5cde7998e67c85496936ee59abc7cc31759f961c217f3c5028f68982b5b1aa69df7b9102fd3950a7d8c0e8ed24574ec6c7be434e74c36c748181e248
- SSDEEP 393216:Vn+Evc2RADK1zusLOdwPszfZ5Bqeu9qwEE:V42R9z1KdwPC5Bxu
- TLSH
  T17C378D03F96254E8C1AAC175866A6233BB71BC49473137EB1B90AB203E76FD06F79714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

credential_access defense_evasion discovery stealer trojan
- Uses browser remote debugging
  Can be used to control the browser and steal sensitive information such as credentials and session cookies.
  credential_access stealer
- Executes dropped EXE
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral3 behavioral4
- Target
  zenith-cracked.exe
- Size 22.1MB
- SHA256 8faf9ebc7b5171ee5000d464d68a69c1119b883eaae4cbed3d748ae27b2bdb94
- MD5 4d7c9c1744b7b64a00378737eaae90ab
- SHA1 23fa160139867030d3d2969896b096f363756c47
- SHA512 6678007d5cde7998e67c85496936ee59abc7cc31759f961c217f3c5028f68982b5b1aa69df7b9102fd3950a7d8c0e8ed24574ec6c7be434e74c36c748181e248
- SSDEEP 393216:Vn+Evc2RADK1zusLOdwPszfZ5Bqeu9qwEE:V42R9z1KdwPC5Bxu
- TLSH
  T17C378D03F96254E8C1AAC175866A6233BB71BC49473137EB1B90AB203E76FD06F79714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

credential_access defense_evasion discovery stealer trojan
- Uses browser remote debugging
  Can be used to control the browser and steal sensitive information such as credentials and session cookies.
  credential_access stealer
- Executes dropped EXE
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral5 behavioral6