ad2f88d362299589c25c14172b3c8f35868c1299dab127aa2cecd224679d92bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad2f88d362299589c25c14172b3c8f35868c1299dab127aa2cecd224679d92bf
Size

97KB
Sample

230818-csfk5aeg99
MD5

007253c857f413182eb252ed04d316a1
SHA1

c05656c501243ab50184041ef2a0ac89bec086cc
SHA256

ad2f88d362299589c25c14172b3c8f35868c1299dab127aa2cecd224679d92bf
SHA512

de05a69e5eb445be24d1289577f8c84b1e625e3af3b6fa7ae1e538ee54e37463aa06438658626142bca16e39093185fb48af18be868175c77a7411dd05f47d7e
SSDEEP

1536:Ai4srz8dOBN9aunr8f88qP2CsRdxgwGGCIOunToIfiWdN:A48oBN9auQf8l2CHRGgKTBfik

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  ad2f88d362299589c25c14172b3c8f35868c1299dab127aa2cecd224679d92bf
- Size
  
  97KB
- MD5
  
  007253c857f413182eb252ed04d316a1
- SHA1
  
  c05656c501243ab50184041ef2a0ac89bec086cc
- SHA256
  
  ad2f88d362299589c25c14172b3c8f35868c1299dab127aa2cecd224679d92bf
- SHA512
  
  de05a69e5eb445be24d1289577f8c84b1e625e3af3b6fa7ae1e538ee54e37463aa06438658626142bca16e39093185fb48af18be868175c77a7411dd05f47d7e
- SSDEEP
  
  1536:Ai4srz8dOBN9aunr8f88qP2CsRdxgwGGCIOunToIfiWdN:A48oBN9auQf8l2CHRGgKTBfik
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2