756fa3325cba8ce7279350277a5117100713c1dfbc86dbd43776afea468109b1 | Triage

Sharing

General

Target

756fa3325cba8ce7279350277a5117100713c1dfbc86dbd43776afea468109b1
Size

1.8MB
Sample

231118-fx1cwabe83
MD5

fe08bc7f0e031bde9e04262b08c2b3fb
SHA1

802ad81591757a7ac20d73f095125cf9910afe48
SHA256

756fa3325cba8ce7279350277a5117100713c1dfbc86dbd43776afea468109b1
SHA512

305b39ec3145df5eacc94278f6dd7ba239925fb2382bbf13ba7c033daafd6596e466938a24175774343055147f2c85ec42a55c0ff82caa177ff8ce0374a1df7c
SSDEEP

24576:j3vLR2VhZBJ905EmMyPnQxhe45LwvHYgrk38pxckZp4wqtXqQhoWlqD9q980uHsE:j3dUZTHtLAlrksLzZmLXpO9q+0O

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  756fa3325cba8ce7279350277a5117100713c1dfbc86dbd43776afea468109b1
- Size
  
  1.8MB
- MD5
  
  fe08bc7f0e031bde9e04262b08c2b3fb
- SHA1
  
  802ad81591757a7ac20d73f095125cf9910afe48
- SHA256
  
  756fa3325cba8ce7279350277a5117100713c1dfbc86dbd43776afea468109b1
- SHA512
  
  305b39ec3145df5eacc94278f6dd7ba239925fb2382bbf13ba7c033daafd6596e466938a24175774343055147f2c85ec42a55c0ff82caa177ff8ce0374a1df7c
- SSDEEP
  
  24576:j3vLR2VhZBJ905EmMyPnQxhe45LwvHYgrk38pxckZp4wqtXqQhoWlqD9q980uHsE:j3dUZTHtLAlrksLzZmLXpO9q+0O
Score

8^/10

discovery spyware stealer
- Drops file in Drivers directory
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer