267266c2fb8d18cccbb5f83b2501a05be44ab732b8293e1e456d7901a51bf397 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

267266c2fb8d18cccbb5f83b2501a05be44ab732b8293e1e456d7901a51bf397
Size

33KB
Sample

240505-mjbwpafc8z
MD5

c89c4144f8a6df6b80225ba2b14e10f5
SHA1

b3f2a2029632c106dc71066592ad1dc1ef8d97b3
SHA256

267266c2fb8d18cccbb5f83b2501a05be44ab732b8293e1e456d7901a51bf397
SHA512

c0f4ff570d0dec1906be25e23e8cce9dc458c96adffc7f50b8fa6dea662e7ecc3221bd4eb3274aaf6776ca2c2422709eefc61d01f93fb5418a457878757e768b
SSDEEP

768:/8PcTO5RroZJ76739sBWsNscWlM3dN9N3ZjfPP:/8Se+Zk78NR3dN5nP

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  267266c2fb8d18cccbb5f83b2501a05be44ab732b8293e1e456d7901a51bf397
- Size
  
  33KB
- MD5
  
  c89c4144f8a6df6b80225ba2b14e10f5
- SHA1
  
  b3f2a2029632c106dc71066592ad1dc1ef8d97b3
- SHA256
  
  267266c2fb8d18cccbb5f83b2501a05be44ab732b8293e1e456d7901a51bf397
- SHA512
  
  c0f4ff570d0dec1906be25e23e8cce9dc458c96adffc7f50b8fa6dea662e7ecc3221bd4eb3274aaf6776ca2c2422709eefc61d01f93fb5418a457878757e768b
- SSDEEP
  
  768:/8PcTO5RroZJ76739sBWsNscWlM3dN9N3ZjfPP:/8Se+Zk78NR3dN5nP
Score

7^/10

spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2