a8cd4a1867c48c31c06e5ec21e0406bbcec904b2b323fa4d8b5191ebeb4b318b | Triage

Sharing

General

Target

a8cd4a1867c48c31c06e5ec21e0406bbcec904b2b323fa4d8b5191ebeb4b318b
Size

3.8MB
Sample

221102-2f6zzsehhj
MD5

cf88572a3d3613a0241628177febd26a
SHA1

9259228116012f7debbc62701c066cc68ed3780c
SHA256

a8cd4a1867c48c31c06e5ec21e0406bbcec904b2b323fa4d8b5191ebeb4b318b
SHA512

b21d280b0658d3168ebea160b01dd38fb9f9f0d5bb62f6389e1948f38315e0589e7ec2e285c1cf3f2948d60c11c3c8769ad92a95317897f5cb4890f016e4d7f7
SSDEEP

49152:YM53XKJE4+uTM15czv0qbBR5zh71wEBmzGWwtN1U7:YMxWCJqzvJb/5h71wEBmzGWwtN1

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  a8cd4a1867c48c31c06e5ec21e0406bbcec904b2b323fa4d8b5191ebeb4b318b
- Size
  
  3.8MB
- MD5
  
  cf88572a3d3613a0241628177febd26a
- SHA1
  
  9259228116012f7debbc62701c066cc68ed3780c
- SHA256
  
  a8cd4a1867c48c31c06e5ec21e0406bbcec904b2b323fa4d8b5191ebeb4b318b
- SHA512
  
  b21d280b0658d3168ebea160b01dd38fb9f9f0d5bb62f6389e1948f38315e0589e7ec2e285c1cf3f2948d60c11c3c8769ad92a95317897f5cb4890f016e4d7f7
- SSDEEP
  
  49152:YM53XKJE4+uTM15czv0qbBR5zh71wEBmzGWwtN1U7:YMxWCJqzvJb/5h71wEBmzGWwtN1
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2