8b7f30b19c662016a1d57fc7a87686c34ba5bf3be4cde7963d288312d6a7835d | Triage

Sharing

General

Target

8b7f30b19c662016a1d57fc7a87686c34ba5bf3be4cde7963d288312d6a7835d
Size

45KB
Sample

221124-arc3haac9v
MD5

35ef17feb8dac8aa742f38d7f7b37336
SHA1

943594766c46f183c27093d0d403b7ec8b7db4ea
SHA256

8b7f30b19c662016a1d57fc7a87686c34ba5bf3be4cde7963d288312d6a7835d
SHA512

6332651bae978d3a9db34f8913849808edbfdef8842fc7a81d461c4d0095aee13b24cd8b0a523aa3f5d4ba04a04c07078e735ce98a098405a83f26a06bd147e2
SSDEEP

768:gDONULnKSiDPxJDYZlrPW9ZSg4S0fKtcx8Jrg0vTLH4RcPOAKIsLSLCT/s2:gJKS8xdq0PqKtcSM4TLQcPOAKdoCTk2

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  8b7f30b19c662016a1d57fc7a87686c34ba5bf3be4cde7963d288312d6a7835d
- Size
  
  45KB
- MD5
  
  35ef17feb8dac8aa742f38d7f7b37336
- SHA1
  
  943594766c46f183c27093d0d403b7ec8b7db4ea
- SHA256
  
  8b7f30b19c662016a1d57fc7a87686c34ba5bf3be4cde7963d288312d6a7835d
- SHA512
  
  6332651bae978d3a9db34f8913849808edbfdef8842fc7a81d461c4d0095aee13b24cd8b0a523aa3f5d4ba04a04c07078e735ce98a098405a83f26a06bd147e2
- SSDEEP
  
  768:gDONULnKSiDPxJDYZlrPW9ZSg4S0fKtcx8Jrg0vTLH4RcPOAKIsLSLCT/s2:gJKS8xdq0PqKtcSM4TLQcPOAKdoCTk2
Score

8^/10

spyware stealer
- Drops file in Drivers directory
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2