440855f9a7951a49d1434beee6183034d2ee15d569bd016591a4bd0f2a2f7bba | Triage

Sharing

General

Target

440855f9a7951a49d1434beee6183034d2ee15d569bd016591a4bd0f2a2f7bba
Size

169KB
Sample

221124-asbk3aad6v
MD5

027df46b9411263717ef91b5e8608820
SHA1

bdafedaed9c6ab83ec739f98bf638e80b555294a
SHA256

440855f9a7951a49d1434beee6183034d2ee15d569bd016591a4bd0f2a2f7bba
SHA512

82f2d347b0b1129f15749e05abd83604a231f35aef288c42b8fd15a12b28c9c36c024346b4bcc0b6fc0a63e59dbca56644e722b1910616ab920fe27142d8ef73
SSDEEP

3072:IVe+aX3zveyNIxq/iVo/MfafRUwFYC5TBf/2Fa9Y3zQOwNnYcVBPPy6t:5+aX3LVOx7Vo/Ms5TB6MCzQOwNnYcHKc

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  440855f9a7951a49d1434beee6183034d2ee15d569bd016591a4bd0f2a2f7bba
- Size
  
  169KB
- MD5
  
  027df46b9411263717ef91b5e8608820
- SHA1
  
  bdafedaed9c6ab83ec739f98bf638e80b555294a
- SHA256
  
  440855f9a7951a49d1434beee6183034d2ee15d569bd016591a4bd0f2a2f7bba
- SHA512
  
  82f2d347b0b1129f15749e05abd83604a231f35aef288c42b8fd15a12b28c9c36c024346b4bcc0b6fc0a63e59dbca56644e722b1910616ab920fe27142d8ef73
- SSDEEP
  
  3072:IVe+aX3zveyNIxq/iVo/MfafRUwFYC5TBf/2Fa9Y3zQOwNnYcVBPPy6t:5+aX3LVOx7Vo/Ms5TB6MCzQOwNnYcHKc
Score

8^/10

spyware stealer
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2