01955fac3fc219bb9e9863e5e4c5960c6c8c9fad590c20c4eba837c412a1cb26 | Triage

Sharing

General

Target

01955fac3fc219bb9e9863e5e4c5960c6c8c9fad590c20c4eba837c412a1cb26
Size

626KB
Sample

220919-pnlb2acfcl
MD5

123dbc5d23301b384f8796fe9ab2f278
SHA1

38271921f6fc9a3dbd75224670f9603ab1248d73
SHA256

01955fac3fc219bb9e9863e5e4c5960c6c8c9fad590c20c4eba837c412a1cb26
SHA512

ec16ef0b83c591b73b4b907ae71511134c9d9d80a646f6c0187e8da21c226378e90285466f2094e0f7a8d795e17eeb2b97915a480826efec698c5aaf8c8b6a34
SSDEEP

6144:+txgWaPErW1civwXSBxl7ju04CfOf/3ix/YheJvm3WeFAiAuzCe8JikKN0Y4RqCV:kGWgvxl7yC2nixMeJqLFPOikKad1KOl

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  01955fac3fc219bb9e9863e5e4c5960c6c8c9fad590c20c4eba837c412a1cb26
- Size
  
  626KB
- MD5
  
  123dbc5d23301b384f8796fe9ab2f278
- SHA1
  
  38271921f6fc9a3dbd75224670f9603ab1248d73
- SHA256
  
  01955fac3fc219bb9e9863e5e4c5960c6c8c9fad590c20c4eba837c412a1cb26
- SHA512
  
  ec16ef0b83c591b73b4b907ae71511134c9d9d80a646f6c0187e8da21c226378e90285466f2094e0f7a8d795e17eeb2b97915a480826efec698c5aaf8c8b6a34
- SSDEEP
  
  6144:+txgWaPErW1civwXSBxl7ju04CfOf/3ix/YheJvm3WeFAiAuzCe8JikKN0Y4RqCV:kGWgvxl7yC2nixMeJqLFPOikKad1KOl
Score

8^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Peripheral Device Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2