9d30f8f6d9a3d0da85cca25bcb2cb555804f73956d944a6d02f76b1e5651e9a4 | Triage

Sharing

General

Target

9d30f8f6d9a3d0da85cca25bcb2cb555804f73956d944a6d02f76b1e5651e9a4
Size

5.1MB
Sample

240308-13h11agh94
MD5

6db86db12d841ff779591c7b7a68916a
SHA1

297b0f2dfbcff93f802a565f5410d778e0c312fb
SHA256

9d30f8f6d9a3d0da85cca25bcb2cb555804f73956d944a6d02f76b1e5651e9a4
SHA512

9502bb2a5b50fe92d79d60e3c35cef78fd61103a4862f2deb1dc9fcc9dd70f2e1f97912736e190ede84734bcd776016445c1504d1ac29287b19b8df1acecb107
SSDEEP

98304:lXSeO6666666666666666666666666666666x666666666666666fwwwwwwwwwwC:t42z8W0YViow1au9hF/qiGA7v5rmnWwr

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  9d30f8f6d9a3d0da85cca25bcb2cb555804f73956d944a6d02f76b1e5651e9a4
- Size
  
  5.1MB
- MD5
  
  6db86db12d841ff779591c7b7a68916a
- SHA1
  
  297b0f2dfbcff93f802a565f5410d778e0c312fb
- SHA256
  
  9d30f8f6d9a3d0da85cca25bcb2cb555804f73956d944a6d02f76b1e5651e9a4
- SHA512
  
  9502bb2a5b50fe92d79d60e3c35cef78fd61103a4862f2deb1dc9fcc9dd70f2e1f97912736e190ede84734bcd776016445c1504d1ac29287b19b8df1acecb107
- SSDEEP
  
  98304:lXSeO6666666666666666666666666666666x666666666666666fwwwwwwwwwwC:t42z8W0YViow1au9hF/qiGA7v5rmnWwr
Score

8^/10

spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2