7db6e7b89825e97a70ffddd87caf6a9b6296134a89388986ea4867359903f260 | Triage

Sharing

General

Target

7db6e7b89825e97a70ffddd87caf6a9b6296134a89388986ea4867359903f260
Size

39KB
Sample

240419-pej3lscd9v
MD5

0c66c78eb026971356126503c6366615
SHA1

0a6ff1ba641cbda042328329393fff95e356f94b
SHA256

7db6e7b89825e97a70ffddd87caf6a9b6296134a89388986ea4867359903f260
SHA512

b5a781cf4eda3414c0c0ba6f1db084f5d19d7df625c587bef83867d1f6bec8a0e96789015acb15adc5b7572fcd203458a26d5a1a00aa6702fc77eb3b08f20495
SSDEEP

768:8bjeUHoO5RroZJ76739/dZVdfpULiAYXjPrN+8WEjrZMYjV8mp8w:8mFe+Zk7VJbwlYXjPrsqrZMYR5p8w

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  7db6e7b89825e97a70ffddd87caf6a9b6296134a89388986ea4867359903f260
- Size
  
  39KB
- MD5
  
  0c66c78eb026971356126503c6366615
- SHA1
  
  0a6ff1ba641cbda042328329393fff95e356f94b
- SHA256
  
  7db6e7b89825e97a70ffddd87caf6a9b6296134a89388986ea4867359903f260
- SHA512
  
  b5a781cf4eda3414c0c0ba6f1db084f5d19d7df625c587bef83867d1f6bec8a0e96789015acb15adc5b7572fcd203458a26d5a1a00aa6702fc77eb3b08f20495
- SSDEEP
  
  768:8bjeUHoO5RroZJ76739/dZVdfpULiAYXjPrN+8WEjrZMYjV8mp8w:8mFe+Zk7VJbwlYXjPrsqrZMYR5p8w
Score

7^/10

spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2