772e3beaa0f907d51a494fa8c9f9452008123e8eabeb5bdde1960f68a496d224 | Triage

Sharing

General

Target

772e3beaa0f907d51a494fa8c9f9452008123e8eabeb5bdde1960f68a496d224
Size

158KB
Sample

231014-b33yqscb93
MD5

c14ff8f1e88d8a6ead775e7767013f08
SHA1

27c0ec0cac4aa705bd0b7f075805c31a5772ccb1
SHA256

772e3beaa0f907d51a494fa8c9f9452008123e8eabeb5bdde1960f68a496d224
SHA512

55a1aa8f0d5f74e818cf3e75bd595b60df34ba1d7e7e82782cb47a3734c2751320b28d114043a8cad90a2032d220936a0c7b0af392e8a35a9e9b47041764a891
SSDEEP

3072:H9faY46tGNttyCa670vTjy9+1w3qG5okf8DMq44NHfva:dx46tGdyr6MT8+1QqGR8DMcJva

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  772e3beaa0f907d51a494fa8c9f9452008123e8eabeb5bdde1960f68a496d224
- Size
  
  158KB
- MD5
  
  c14ff8f1e88d8a6ead775e7767013f08
- SHA1
  
  27c0ec0cac4aa705bd0b7f075805c31a5772ccb1
- SHA256
  
  772e3beaa0f907d51a494fa8c9f9452008123e8eabeb5bdde1960f68a496d224
- SHA512
  
  55a1aa8f0d5f74e818cf3e75bd595b60df34ba1d7e7e82782cb47a3734c2751320b28d114043a8cad90a2032d220936a0c7b0af392e8a35a9e9b47041764a891
- SSDEEP
  
  3072:H9faY46tGNttyCa670vTjy9+1w3qG5okf8DMq44NHfva:dx46tGdyr6MT8+1QqGR8DMcJva
Score

8^/10

spyware stealer
- Drops file in Drivers directory
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2