b2d2d64c99715cdf45972fb4feab48be55a7f5028cf9e4a438a473d3f6a292bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2d2d64c99715cdf45972fb4feab48be55a7f5028cf9e4a438a473d3f6a292bd
Size

528KB
Sample

221020-ceweeshfe7
MD5

7c57148f42fcb331c75ff00b1d36d300
SHA1

cabce761b06a3aff074aeedc3e5d87754f769d58
SHA256

b2d2d64c99715cdf45972fb4feab48be55a7f5028cf9e4a438a473d3f6a292bd
SHA512

27bb208f42b1ecbd35a0be57b26f333ede194adfbcd96dfe1659640ba0855dc16666ab5e3a5d4894967c011977074f534a4cac746d1e8c35bcc83b861878c577
SSDEEP

12288:FELhVMCeBjc5YZOgX49yL9ZezPOmcrhh1cct:FELzMCOI5Y349yLqzPOPt

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  b2d2d64c99715cdf45972fb4feab48be55a7f5028cf9e4a438a473d3f6a292bd
- Size
  
  528KB
- MD5
  
  7c57148f42fcb331c75ff00b1d36d300
- SHA1
  
  cabce761b06a3aff074aeedc3e5d87754f769d58
- SHA256
  
  b2d2d64c99715cdf45972fb4feab48be55a7f5028cf9e4a438a473d3f6a292bd
- SHA512
  
  27bb208f42b1ecbd35a0be57b26f333ede194adfbcd96dfe1659640ba0855dc16666ab5e3a5d4894967c011977074f534a4cac746d1e8c35bcc83b861878c577
- SSDEEP
  
  12288:FELhVMCeBjc5YZOgX49yL9ZezPOmcrhh1cct:FELzMCOI5Y349yLqzPOPt
Score

8^/10

spyware stealer
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2