5243af4c5264a1827f7cc4a3e6d9cd22dced772158e3c27b0b9a2047a3c1028b | Triage

Sharing

General

Target

5243af4c5264a1827f7cc4a3e6d9cd22dced772158e3c27b0b9a2047a3c1028b
Size

122KB
Sample

221002-ezh1yagfg6
MD5

64dc6ef2c592a1381db98abc28794540
SHA1

372a685f8d1ecf9cfd15ab60e093345ca9dbba4f
SHA256

5243af4c5264a1827f7cc4a3e6d9cd22dced772158e3c27b0b9a2047a3c1028b
SHA512

7675834f6624f75116661098a4a5d35e1fb9f669f74521095fd8a152bce0d66fb9f33c49197ca6fcec1cab484c41ecac1b30d9f339aef2b3abdfb7a7891c8047
SSDEEP

1536:wmAunwi6bNSiWrtpz0m3B+XoU+kOjxHWABdhmgSgxiiuISAY6oJK:wzunwoiezDR+Xp+kONbmgStN/yoo

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  5243af4c5264a1827f7cc4a3e6d9cd22dced772158e3c27b0b9a2047a3c1028b
- Size
  
  122KB
- MD5
  
  64dc6ef2c592a1381db98abc28794540
- SHA1
  
  372a685f8d1ecf9cfd15ab60e093345ca9dbba4f
- SHA256
  
  5243af4c5264a1827f7cc4a3e6d9cd22dced772158e3c27b0b9a2047a3c1028b
- SHA512
  
  7675834f6624f75116661098a4a5d35e1fb9f669f74521095fd8a152bce0d66fb9f33c49197ca6fcec1cab484c41ecac1b30d9f339aef2b3abdfb7a7891c8047
- SSDEEP
  
  1536:wmAunwi6bNSiWrtpz0m3B+XoU+kOjxHWABdhmgSgxiiuISAY6oJK:wzunwoiezDR+Xp+kONbmgStN/yoo
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2