eab8e377cd9c99c292513824899e46e279b168453fcd2af025936ca3023267ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eab8e377cd9c99c292513824899e46e279b168453fcd2af025936ca3023267ba
Size

33KB
Sample

231107-aygn9sgg9v
MD5

78b13275cb58f2d7c422baa8f6be8069
SHA1

bd808b9d43f59a792c7477ad7c6d563099dcdb42
SHA256

eab8e377cd9c99c292513824899e46e279b168453fcd2af025936ca3023267ba
SHA512

ae5241c76e07bdebf43c5bb8b8f6bd6a26fab8fe655002d49a59049754e581510daba1a10a69563adf1475415548233edc918abfe32dba0592095bdc6d3b0a9a
SSDEEP

768:JGTElOIEvzMXqtwp/lDTJg/MFksCRsd2u9C9MFWoVaZel:JeaYzMXqtGN/CstC9qVF

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  eab8e377cd9c99c292513824899e46e279b168453fcd2af025936ca3023267ba
- Size
  
  33KB
- MD5
  
  78b13275cb58f2d7c422baa8f6be8069
- SHA1
  
  bd808b9d43f59a792c7477ad7c6d563099dcdb42
- SHA256
  
  eab8e377cd9c99c292513824899e46e279b168453fcd2af025936ca3023267ba
- SHA512
  
  ae5241c76e07bdebf43c5bb8b8f6bd6a26fab8fe655002d49a59049754e581510daba1a10a69563adf1475415548233edc918abfe32dba0592095bdc6d3b0a9a
- SSDEEP
  
  768:JGTElOIEvzMXqtwp/lDTJg/MFksCRsd2u9C9MFWoVaZel:JeaYzMXqtGN/CstC9qVF
Score

8^/10

spyware stealer
- Drops file in Drivers directory
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2