7e4e7447ce04580a3af3a9bf90810712d6daebc0ced6c6856eae22771ac50956 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e4e7447ce04580a3af3a9bf90810712d6daebc0ced6c6856eae22771ac50956
Size

33KB
Sample

240211-syxplabd38
MD5

0e8792b58f9237e03516447b7048d63c
SHA1

6f28494f0766ee470bbced1fe79fb10e5fee8252
SHA256

7e4e7447ce04580a3af3a9bf90810712d6daebc0ced6c6856eae22771ac50956
SHA512

6b935debde1916d7b1f2239ac3534c1f1585406c0d5f1060fdb356253cfab2fe9c716fd7ad05f20b9b3bb222307f15ae1b88e9062c7282d570b523150364e8a5
SSDEEP

768:PVElOIEvzMXqtwp/lttaL7HP4wIncLRdR5kP78a0RJW/a:PVaYzMXqtGNttyUn01Q78a4R

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  7e4e7447ce04580a3af3a9bf90810712d6daebc0ced6c6856eae22771ac50956
- Size
  
  33KB
- MD5
  
  0e8792b58f9237e03516447b7048d63c
- SHA1
  
  6f28494f0766ee470bbced1fe79fb10e5fee8252
- SHA256
  
  7e4e7447ce04580a3af3a9bf90810712d6daebc0ced6c6856eae22771ac50956
- SHA512
  
  6b935debde1916d7b1f2239ac3534c1f1585406c0d5f1060fdb356253cfab2fe9c716fd7ad05f20b9b3bb222307f15ae1b88e9062c7282d570b523150364e8a5
- SSDEEP
  
  768:PVElOIEvzMXqtwp/lttaL7HP4wIncLRdR5kP78a0RJW/a:PVaYzMXqtGNttyUn01Q78a4R
Score

8^/10

spyware stealer
- Drops file in Drivers directory
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2