e129c667b5cc11080fa0bd41d2bfaaeac359f8f1c6023cdbfd383d6204a3e23e | Triage

Sharing

General

Target

e129c667b5cc11080fa0bd41d2bfaaeac359f8f1c6023cdbfd383d6204a3e23e
Size

5.1MB
Sample

240313-b8dk2ahc5s
MD5

dd8e6b04a736117426a65bc34bfba6ed
SHA1

8a7e047876f1e814b4ddb14b190c8e975737032e
SHA256

e129c667b5cc11080fa0bd41d2bfaaeac359f8f1c6023cdbfd383d6204a3e23e
SHA512

bb601581fe7fc2a9ab760ee95ce0b2dcc3b21f3910a3f5e475aada82875dd9dedadd25e93cde79f925a80ee82bf084946dc9211ccda87c0406c25d8abe5f9f59
SSDEEP

98304:lXSeO6666666666666666666666666666666x666666666666666fwwwwwwwwwwm:t42z8W0YViow1au9hF/qiGA7v5rmnWwP

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  e129c667b5cc11080fa0bd41d2bfaaeac359f8f1c6023cdbfd383d6204a3e23e
- Size
  
  5.1MB
- MD5
  
  dd8e6b04a736117426a65bc34bfba6ed
- SHA1
  
  8a7e047876f1e814b4ddb14b190c8e975737032e
- SHA256
  
  e129c667b5cc11080fa0bd41d2bfaaeac359f8f1c6023cdbfd383d6204a3e23e
- SHA512
  
  bb601581fe7fc2a9ab760ee95ce0b2dcc3b21f3910a3f5e475aada82875dd9dedadd25e93cde79f925a80ee82bf084946dc9211ccda87c0406c25d8abe5f9f59
- SSDEEP
  
  98304:lXSeO6666666666666666666666666666666x666666666666666fwwwwwwwwwwm:t42z8W0YViow1au9hF/qiGA7v5rmnWwP
Score

8^/10

spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2