67fe5a639525c28751b2b8492a538602846c54fd7818547dcfcd3a3f2a691533 | Triage

Sharing

General

Target

67fe5a639525c28751b2b8492a538602846c54fd7818547dcfcd3a3f2a691533
Size

910KB
Sample

221012-klg5dadagp
MD5

dd9d34b2bcaf57ed5192ca1b73139a46
SHA1

5b3e4f618ab14b7ac03dfd732fede5ace95d5566
SHA256

67fe5a639525c28751b2b8492a538602846c54fd7818547dcfcd3a3f2a691533
SHA512

ea8484bf6bf6722a5adf0417583ca267aa03704b72d39ab3fa90159e95fd298297d78f762e909330d2e71d9adf41e60f7b293a7b7f4ebcefffca2eafe5e81307
SSDEEP

24576:lKKKKKKKKKKKKKKKKKN7ChBWMQ+uSJJd1BQzK:ZjLuSh1BAK

Score

9^/10

ransomware spyware stealer

Malware Config

Targets

- Target
  
  67fe5a639525c28751b2b8492a538602846c54fd7818547dcfcd3a3f2a691533
- Size
  
  910KB
- MD5
  
  dd9d34b2bcaf57ed5192ca1b73139a46
- SHA1
  
  5b3e4f618ab14b7ac03dfd732fede5ace95d5566
- SHA256
  
  67fe5a639525c28751b2b8492a538602846c54fd7818547dcfcd3a3f2a691533
- SHA512
  
  ea8484bf6bf6722a5adf0417583ca267aa03704b72d39ab3fa90159e95fd298297d78f762e909330d2e71d9adf41e60f7b293a7b7f4ebcefffca2eafe5e81307
- SSDEEP
  
  24576:lKKKKKKKKKKKKKKKKKN7ChBWMQ+uSJJd1BQzK:ZjLuSh1BAK
Score

9^/10

ransomware spyware stealer
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Replication Through Removable Media

Execution

Persistence

Privilege Escalation

Defense Evasion

File Deletion

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Replication Through Removable Media

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

ransomwarespywarestealer

behavioral2