54f2acfd4eed5f2cd5c8bb76a14620a935682c0d6eb07a9b7a1a90d8b9490dce | Triage

Sharing

General

Target

54f2acfd4eed5f2cd5c8bb76a14620a935682c0d6eb07a9b7a1a90d8b9490dce
Size

76KB
Sample

240430-wvqnnacf61
MD5

73d4ee30fd04ea282dafd26fe1978175
SHA1

5988f77c9143163075efcde3a2e98ebbdde33e3b
SHA256

54f2acfd4eed5f2cd5c8bb76a14620a935682c0d6eb07a9b7a1a90d8b9490dce
SHA512

17e67837b2b624235b937f25b963adce806c3c2ebca1637ceae72010e1b196b6cfb51a546ce467179c7e05e3820e152f06e5944a4da6c5f53fc5e7abd7824281
SSDEEP

1536:8rFe+Zk7VJbwlYXjPrsqrZMYR5p8woriw+d9bHrkT5gUHz7FxtJ:8Je+azbRPrlr9RXForBkfkT5xHzD

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  54f2acfd4eed5f2cd5c8bb76a14620a935682c0d6eb07a9b7a1a90d8b9490dce
- Size
  
  76KB
- MD5
  
  73d4ee30fd04ea282dafd26fe1978175
- SHA1
  
  5988f77c9143163075efcde3a2e98ebbdde33e3b
- SHA256
  
  54f2acfd4eed5f2cd5c8bb76a14620a935682c0d6eb07a9b7a1a90d8b9490dce
- SHA512
  
  17e67837b2b624235b937f25b963adce806c3c2ebca1637ceae72010e1b196b6cfb51a546ce467179c7e05e3820e152f06e5944a4da6c5f53fc5e7abd7824281
- SSDEEP
  
  1536:8rFe+Zk7VJbwlYXjPrsqrZMYR5p8woriw+d9bHrkT5gUHz7FxtJ:8Je+azbRPrlr9RXForBkfkT5xHzD
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2