beb624f924ec28450508a17f7d0dc614c26d71f6046aa02d032fbc4fc18d467d | Triage

Sharing

General

Target

beb624f924ec28450508a17f7d0dc614c26d71f6046aa02d032fbc4fc18d467d
Size

2.5MB
Sample

231011-lmeajsgc67
MD5

72604b149d4d1ce8f84f4024e744328d
SHA1

53da26d9a87a0c6c983e55dd5604f836f8742155
SHA256

beb624f924ec28450508a17f7d0dc614c26d71f6046aa02d032fbc4fc18d467d
SHA512

0a192d3e6b98d56ce9b45a6ed6adadf781071514fb3defda2873e0fd9de00293c7a10eeafbcc1897cf63cf7d954c663b00363ebcc38e53a7395b0b41e1a05177
SSDEEP

24576:1NIPd/zHfWWrwPC6zwSO8VgJLdDrGnrdEROGHOhMkQJCtHYX6RC/hRJHOhHCZw:1NIlaO8qdDqnroHOnQhKsHOIZw

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  beb624f924ec28450508a17f7d0dc614c26d71f6046aa02d032fbc4fc18d467d
- Size
  
  2.5MB
- MD5
  
  72604b149d4d1ce8f84f4024e744328d
- SHA1
  
  53da26d9a87a0c6c983e55dd5604f836f8742155
- SHA256
  
  beb624f924ec28450508a17f7d0dc614c26d71f6046aa02d032fbc4fc18d467d
- SHA512
  
  0a192d3e6b98d56ce9b45a6ed6adadf781071514fb3defda2873e0fd9de00293c7a10eeafbcc1897cf63cf7d954c663b00363ebcc38e53a7395b0b41e1a05177
- SSDEEP
  
  24576:1NIPd/zHfWWrwPC6zwSO8VgJLdDrGnrdEROGHOhMkQJCtHYX6RC/hRJHOhHCZw:1NIlaO8qdDqnroHOnQhKsHOIZw
Score

7^/10

discovery spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer