e951832530ecce0c74f91e4b60bc96dda5994a1b7c14b66e9da39f50cc146ce8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e951832530ecce0c74f91e4b60bc96dda5994a1b7c14b66e9da39f50cc146ce8
Size

81KB
Sample

240503-wy2kbsfh33
MD5

28dfabb2f09197dacfbd2f8c40876af3
SHA1

e7e47dbab7a7451c62ddd7b09c345332d868615b
SHA256

e951832530ecce0c74f91e4b60bc96dda5994a1b7c14b66e9da39f50cc146ce8
SHA512

77ade885935be3274bd015be7469d605cca83a9bf03bf81bc7e8846fe336efa906ffa883e1996e9c60b621068fd004faaee748f0928c064877970c992080fd39
SSDEEP

1536:Ig8Ze+Zk77RNzLiTOB2zHxvuS6YGJYjilZrPMC5V:Igae+aX3zvS6Y0ZIC5V

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  e951832530ecce0c74f91e4b60bc96dda5994a1b7c14b66e9da39f50cc146ce8
- Size
  
  81KB
- MD5
  
  28dfabb2f09197dacfbd2f8c40876af3
- SHA1
  
  e7e47dbab7a7451c62ddd7b09c345332d868615b
- SHA256
  
  e951832530ecce0c74f91e4b60bc96dda5994a1b7c14b66e9da39f50cc146ce8
- SHA512
  
  77ade885935be3274bd015be7469d605cca83a9bf03bf81bc7e8846fe336efa906ffa883e1996e9c60b621068fd004faaee748f0928c064877970c992080fd39
- SSDEEP
  
  1536:Ig8Ze+Zk77RNzLiTOB2zHxvuS6YGJYjilZrPMC5V:Igae+aX3zvS6Y0ZIC5V
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2