f9a849d207f536e50f8754cf51ff43341add5308a56e850f4c9e3cb5ffb56830 | Triage

Sharing

General

Target

Windows-outbyte-driver-updater.exe
Size

18.8MB
Sample

230629-csw8wacf6t
MD5

ecd371857482d36ef8d32bb63ebd8ba1
SHA1

1fa71908fb35f0dfc2db1cf872360108f5b89531
SHA256

f9a849d207f536e50f8754cf51ff43341add5308a56e850f4c9e3cb5ffb56830
SHA512

e975c87f36b5d41cf9df449a1e4e51c891eff44e3334367e82c1eb798c77eb075dea95eeac41e18380a87aac2d062b486554fbc74cae93444f780aa83b6b28bf
SSDEEP

393216:aMxDQwQC3nUpm/UaU5R0Wxf+Iynr5FKD33OjQEhRivfn8idSLWT:aMxDQwH3UpoMTZxKn9cDHI9ILbT

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  Windows-outbyte-driver-updater.exe
- Size
  
  18.8MB
- MD5
  
  ecd371857482d36ef8d32bb63ebd8ba1
- SHA1
  
  1fa71908fb35f0dfc2db1cf872360108f5b89531
- SHA256
  
  f9a849d207f536e50f8754cf51ff43341add5308a56e850f4c9e3cb5ffb56830
- SHA512
  
  e975c87f36b5d41cf9df449a1e4e51c891eff44e3334367e82c1eb798c77eb075dea95eeac41e18380a87aac2d062b486554fbc74cae93444f780aa83b6b28bf
- SSDEEP
  
  393216:aMxDQwQC3nUpm/UaU5R0Wxf+Iynr5FKD33OjQEhRivfn8idSLWT:aMxDQwH3UpoMTZxKn9cDHI9ILbT
Score

7^/10

discovery spyware stealer
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer