3adfb1ca639f3c3f33f38f2c3d1bb35e2ac40c40b60ea3ad3f65cf638262703c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3adfb1ca639f3c3f33f38f2c3d1bb35e2ac40c40b60ea3ad3f65cf638262703c
Size

243KB
Sample

221124-asj77sad7z
MD5

52f4f9f17b16161172575b3e9da64bdf
SHA1

27b015fa2981eff735cf4a80ae1cf1b8fe82c709
SHA256

3adfb1ca639f3c3f33f38f2c3d1bb35e2ac40c40b60ea3ad3f65cf638262703c
SHA512

e2f3c2883e5241294c7c1fe681bf48b2f99f987c0e8e4684012683e0090d218fd6d4700bcd5b33b633f4df4cd39ccf57bf416e1b5bb2ad680008c08615a5a3e8
SSDEEP

3072:h05j95S4cTGJ805j95S4cTGJCWI9HZmwZ2b:0j94Szj94SIDT2b

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  3adfb1ca639f3c3f33f38f2c3d1bb35e2ac40c40b60ea3ad3f65cf638262703c
- Size
  
  243KB
- MD5
  
  52f4f9f17b16161172575b3e9da64bdf
- SHA1
  
  27b015fa2981eff735cf4a80ae1cf1b8fe82c709
- SHA256
  
  3adfb1ca639f3c3f33f38f2c3d1bb35e2ac40c40b60ea3ad3f65cf638262703c
- SHA512
  
  e2f3c2883e5241294c7c1fe681bf48b2f99f987c0e8e4684012683e0090d218fd6d4700bcd5b33b633f4df4cd39ccf57bf416e1b5bb2ad680008c08615a5a3e8
- SSDEEP
  
  3072:h05j95S4cTGJ805j95S4cTGJCWI9HZmwZ2b:0j94Szj94SIDT2b
Score

8^/10

spyware stealer
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2