4e19f1f774a77518c3823c83c9677728d3fab3b4c5feebae03dcc3b262e66f9a | Triage

Sharing

General

Target

4e19f1f774a77518c3823c83c9677728d3fab3b4c5feebae03dcc3b262e66f9a
Size

39KB
Sample

221127-xhvyaaag88
MD5

8a3b9e40a14334cceb40273473ea1720
SHA1

0c4dea469d2dcc4741f0368f7d12a9b79d7a6887
SHA256

4e19f1f774a77518c3823c83c9677728d3fab3b4c5feebae03dcc3b262e66f9a
SHA512

c7d39433ca797ec739119d736a41ffbf80d06ba91aa649d0236a105bb7980d8d0583bd76dc7793107419da0c3525dc88f6c0f142c047177dd6702ee8b05f2cd4
SSDEEP

768:znhO5RroZJ76739/dZVdfpULiAYXjPrN+8WEjrZMYjV8mp8w:znhe+Zk7VJbwlYXjPrsqrZMYR5p8w

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  4e19f1f774a77518c3823c83c9677728d3fab3b4c5feebae03dcc3b262e66f9a
- Size
  
  39KB
- MD5
  
  8a3b9e40a14334cceb40273473ea1720
- SHA1
  
  0c4dea469d2dcc4741f0368f7d12a9b79d7a6887
- SHA256
  
  4e19f1f774a77518c3823c83c9677728d3fab3b4c5feebae03dcc3b262e66f9a
- SHA512
  
  c7d39433ca797ec739119d736a41ffbf80d06ba91aa649d0236a105bb7980d8d0583bd76dc7793107419da0c3525dc88f6c0f142c047177dd6702ee8b05f2cd4
- SSDEEP
  
  768:znhO5RroZJ76739/dZVdfpULiAYXjPrN+8WEjrZMYjV8mp8w:znhe+Zk7VJbwlYXjPrsqrZMYR5p8w
Score

7^/10

spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2