5367a74fadfdb8b7a28120e69edfffbe94b1e7c0757fa55e58d1501ccdfe3d37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5367a74fadfdb8b7a28120e69edfffbe94b1e7c0757fa55e58d1501ccdfe3d37
Size

33KB
Sample

221127-xhzapsag96
MD5

ad497e47848f62a27a1051e5bbe43789
SHA1

0ddea8e45a900b14557ebbe9569bf7ec574f4374
SHA256

5367a74fadfdb8b7a28120e69edfffbe94b1e7c0757fa55e58d1501ccdfe3d37
SHA512

09eba4fb3e1129546cb90e4d012210f03ddb45993ce05e17241af7eeac7051cfd73ef8d38ec1c3682f9b244481ef6921c6d89b128a7dc41d3fceaa8f160f1936
SSDEEP

768:/nO5RroZJ76739sBWsNscWlM3dN9N3ZjfPP:/ne+Zk78NR3dN5nP

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  5367a74fadfdb8b7a28120e69edfffbe94b1e7c0757fa55e58d1501ccdfe3d37
- Size
  
  33KB
- MD5
  
  ad497e47848f62a27a1051e5bbe43789
- SHA1
  
  0ddea8e45a900b14557ebbe9569bf7ec574f4374
- SHA256
  
  5367a74fadfdb8b7a28120e69edfffbe94b1e7c0757fa55e58d1501ccdfe3d37
- SHA512
  
  09eba4fb3e1129546cb90e4d012210f03ddb45993ce05e17241af7eeac7051cfd73ef8d38ec1c3682f9b244481ef6921c6d89b128a7dc41d3fceaa8f160f1936
- SSDEEP
  
  768:/nO5RroZJ76739sBWsNscWlM3dN9N3ZjfPP:/ne+Zk78NR3dN5nP
Score

7^/10

spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2