fe4637fc55e4d63255c3b02952a834c069c877aa1dfdde60df1f120c2aa0bef5 | Triage

Sharing

General

Target

fe4637fc55e4d63255c3b02952a834c069c877aa1dfdde60df1f120c2aa0bef5
Size

56KB
Sample

240428-xx13vafb5y
MD5

fc2b57dae8ce84523b3d8f4297e94cf4
SHA1

7a48d1d0faca8a5f430d06db409e8c9ef6c4a769
SHA256

fe4637fc55e4d63255c3b02952a834c069c877aa1dfdde60df1f120c2aa0bef5
SHA512

483e836531c9412d23b33f5b102ce7d12034779302e9df6d2b44be92a4f35b56c6e842dc952efdbd58cb6afd76c54db2ebd6882dcebe911f803b4acf38fcc8b8
SSDEEP

768:/qLPcTO5RroZJ76739sBWsNscWlM3dN9N3ZjfPPB8M7A+eK+OJfZFd/bhifLGWrI:/qbSe+Zk78NR3dN5nPBdeK+UfZ/XWrI

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  fe4637fc55e4d63255c3b02952a834c069c877aa1dfdde60df1f120c2aa0bef5
- Size
  
  56KB
- MD5
  
  fc2b57dae8ce84523b3d8f4297e94cf4
- SHA1
  
  7a48d1d0faca8a5f430d06db409e8c9ef6c4a769
- SHA256
  
  fe4637fc55e4d63255c3b02952a834c069c877aa1dfdde60df1f120c2aa0bef5
- SHA512
  
  483e836531c9412d23b33f5b102ce7d12034779302e9df6d2b44be92a4f35b56c6e842dc952efdbd58cb6afd76c54db2ebd6882dcebe911f803b4acf38fcc8b8
- SSDEEP
  
  768:/qLPcTO5RroZJ76739sBWsNscWlM3dN9N3ZjfPPB8M7A+eK+OJfZFd/bhifLGWrI:/qbSe+Zk78NR3dN5nPBdeK+UfZ/XWrI
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2