a4354399aeac5bc87ae2213cef7e551c34eb603cc78d0fbbf1485924b036ff65 | Triage

Sharing

General

Target

a4354399aeac5bc87ae2213cef7e551c34eb603cc78d0fbbf1485924b036ff65
Size

70KB
Sample

240510-crvnnage99
MD5

b7b8c6622d451a1ad91825f48ee3e1d2
SHA1

bb0817a3885c7daee2809a600fd02fa86e5b339d
SHA256

a4354399aeac5bc87ae2213cef7e551c34eb603cc78d0fbbf1485924b036ff65
SHA512

5f5942797b50b5598b9152a868f173ced0b650456f8eed76b6033620c72e73538e8177158c2674a916ca140ae1882b09febc129596d0a84baaa0a672e93b595f
SSDEEP

1536:Aie+Zk77RNH2iT919XKKkQeZriw+d9bHrkT5gUHz7FxtJ:Aie+aX3rX9DsrBkfkT5xHzD

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  a4354399aeac5bc87ae2213cef7e551c34eb603cc78d0fbbf1485924b036ff65
- Size
  
  70KB
- MD5
  
  b7b8c6622d451a1ad91825f48ee3e1d2
- SHA1
  
  bb0817a3885c7daee2809a600fd02fa86e5b339d
- SHA256
  
  a4354399aeac5bc87ae2213cef7e551c34eb603cc78d0fbbf1485924b036ff65
- SHA512
  
  5f5942797b50b5598b9152a868f173ced0b650456f8eed76b6033620c72e73538e8177158c2674a916ca140ae1882b09febc129596d0a84baaa0a672e93b595f
- SSDEEP
  
  1536:Aie+Zk77RNH2iT919XKKkQeZriw+d9bHrkT5gUHz7FxtJ:Aie+aX3rX9DsrBkfkT5xHzD
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2