e8e38d603907283850682453149864e35c207fe161689f3a5a905043a158c6b3 | Triage

Sharing

General

Target

e8e38d603907283850682453149864e35c207fe161689f3a5a905043a158c6b3
Size

39KB
Sample

231123-k5wf4sgh47
MD5

349babe461eb601756f45846bdac9367
SHA1

c9b3b6a3ff64f7248f0be157a4a8a68be78abb15
SHA256

e8e38d603907283850682453149864e35c207fe161689f3a5a905043a158c6b3
SHA512

10e8973adbec3c51e4b5ad09c3858fc26e46dd1149b6a740096c6246517bde41c7a7fbf0b5c04ae09c3c787cd900c5fb532e784f593f0d5dffaf212087c5f09a
SSDEEP

768:8PL49svO5RroZJ76739/dZVdfpULiAYXjPrN+8WEjrZMYjV8mp8w:8Pve+Zk7VJbwlYXjPrsqrZMYR5p8w

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  e8e38d603907283850682453149864e35c207fe161689f3a5a905043a158c6b3
- Size
  
  39KB
- MD5
  
  349babe461eb601756f45846bdac9367
- SHA1
  
  c9b3b6a3ff64f7248f0be157a4a8a68be78abb15
- SHA256
  
  e8e38d603907283850682453149864e35c207fe161689f3a5a905043a158c6b3
- SHA512
  
  10e8973adbec3c51e4b5ad09c3858fc26e46dd1149b6a740096c6246517bde41c7a7fbf0b5c04ae09c3c787cd900c5fb532e784f593f0d5dffaf212087c5f09a
- SSDEEP
  
  768:8PL49svO5RroZJ76739/dZVdfpULiAYXjPrN+8WEjrZMYjV8mp8w:8Pve+Zk7VJbwlYXjPrsqrZMYR5p8w
Score

7^/10

spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2