3b893a8c2772b1f36a77320430e9908fdb3077a8fd61f8f8dc21cd846b863dd8 | Triage

Sharing

General

Target

3b893a8c2772b1f36a77320430e9908fdb3077a8fd61f8f8dc21cd846b863dd8
Size

2.8MB
Sample

231012-hlr88sce9v
MD5

faf05f39c25cedd88c2cb19c6f5d0b96
SHA1

84e52cb8dad24548627f34564a6b903786d4e742
SHA256

3b893a8c2772b1f36a77320430e9908fdb3077a8fd61f8f8dc21cd846b863dd8
SHA512

fdb12c779b30152401bdcd8d010710fe29c2b66e4881af90f023875756673de2e6e2a129cda1007911548eda69cf59cd8ae219d5bf44da7b588f3bfc1d3d8627
SSDEEP

49152:9C6gLKJuMarhVnMFwTH8/giBiBcbk4ZxZ2DqFeVMhuxcPh:9Hd1XdhBiiMa7

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  3b893a8c2772b1f36a77320430e9908fdb3077a8fd61f8f8dc21cd846b863dd8
- Size
  
  2.8MB
- MD5
  
  faf05f39c25cedd88c2cb19c6f5d0b96
- SHA1
  
  84e52cb8dad24548627f34564a6b903786d4e742
- SHA256
  
  3b893a8c2772b1f36a77320430e9908fdb3077a8fd61f8f8dc21cd846b863dd8
- SHA512
  
  fdb12c779b30152401bdcd8d010710fe29c2b66e4881af90f023875756673de2e6e2a129cda1007911548eda69cf59cd8ae219d5bf44da7b588f3bfc1d3d8627
- SSDEEP
  
  49152:9C6gLKJuMarhVnMFwTH8/giBiBcbk4ZxZ2DqFeVMhuxcPh:9Hd1XdhBiiMa7
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2