9c832042abf62cb72ffb52d8900c89c37528dcb126d3e6db6726ed51f0b19670 | Triage

Sharing

General

Target

9c832042abf62cb72ffb52d8900c89c37528dcb126d3e6db6726ed51f0b19670
Size

2.6MB
Sample

240310-bbbp6sff72
MD5

df53ad13aff8929fe1a4ba5b42efd2a1
SHA1

8a0fe7e2db23166ac9d9994af28dbf0904f09709
SHA256

9c832042abf62cb72ffb52d8900c89c37528dcb126d3e6db6726ed51f0b19670
SHA512

61682899ffbcce870aaa0e8bbf6f12d8926010440bf45542f4cc40edac1efb9593394595f05eda22ebbdc8bc3697e726383d6c83367f7b39d73125c109687124
SSDEEP

49152:zkqQV4PlKqAllllKd1LYguqOxTmRXcObG:qV4PlKqpDYgLsObG

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  9c832042abf62cb72ffb52d8900c89c37528dcb126d3e6db6726ed51f0b19670
- Size
  
  2.6MB
- MD5
  
  df53ad13aff8929fe1a4ba5b42efd2a1
- SHA1
  
  8a0fe7e2db23166ac9d9994af28dbf0904f09709
- SHA256
  
  9c832042abf62cb72ffb52d8900c89c37528dcb126d3e6db6726ed51f0b19670
- SHA512
  
  61682899ffbcce870aaa0e8bbf6f12d8926010440bf45542f4cc40edac1efb9593394595f05eda22ebbdc8bc3697e726383d6c83367f7b39d73125c109687124
- SSDEEP
  
  49152:zkqQV4PlKqAllllKd1LYguqOxTmRXcObG:qV4PlKqpDYgLsObG
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2