bdd47349c9e0764d2b83d2819d27607ee1ef07c17a1f18c8cdfc38b85e6dde8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdd47349c9e0764d2b83d2819d27607ee1ef07c17a1f18c8cdfc38b85e6dde8b
Size

33KB
Sample

221205-3vygtscd2t
MD5

86145837a7c8fa76b1d1c5036080f277
SHA1

267ca0bcdb2f8c5ff627d896b27f604b1d6c24b4
SHA256

bdd47349c9e0764d2b83d2819d27607ee1ef07c17a1f18c8cdfc38b85e6dde8b
SHA512

307809e4cbb78484e8b59f2c4f5778a8235a0684fbd0ad2fb7e9ea5d301ac42962f8c835f3fafc57093c6b5eb138ff94677e389d67a9807ca75599302be6f127
SSDEEP

768:yQO5RroZJ76739sBWsI55uPquQ8W88nvlIq/J8:yQe+Zk78I5IvEnvlIq

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  bdd47349c9e0764d2b83d2819d27607ee1ef07c17a1f18c8cdfc38b85e6dde8b
- Size
  
  33KB
- MD5
  
  86145837a7c8fa76b1d1c5036080f277
- SHA1
  
  267ca0bcdb2f8c5ff627d896b27f604b1d6c24b4
- SHA256
  
  bdd47349c9e0764d2b83d2819d27607ee1ef07c17a1f18c8cdfc38b85e6dde8b
- SHA512
  
  307809e4cbb78484e8b59f2c4f5778a8235a0684fbd0ad2fb7e9ea5d301ac42962f8c835f3fafc57093c6b5eb138ff94677e389d67a9807ca75599302be6f127
- SSDEEP
  
  768:yQO5RroZJ76739sBWsI55uPquQ8W88nvlIq/J8:yQe+Zk78I5IvEnvlIq
Score

7^/10

spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2