d0cdc133ccb1908bece8c6059ba207f87b85d15e69a08bf1b362f99bd2c072ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0cdc133ccb1908bece8c6059ba207f87b85d15e69a08bf1b362f99bd2c072ff
Size

724KB
Sample

240513-wvvydahc75
MD5

61fdbd5ba84727f09603668996f18a4b
SHA1

9aaefe6405b2230a16a96bc2e9ff999548b554c6
SHA256

d0cdc133ccb1908bece8c6059ba207f87b85d15e69a08bf1b362f99bd2c072ff
SHA512

4e5ece2a33414a5de41fdd5dbacbe2abd8559f9010de9b27cf17f5b23fbe7bc49c55dd0d29d269388d176a7b3dce4ce989c3573102ca5478646650276f570833
SSDEEP

12288:LaSfC6Aj+TN5uixZN+8rKhUdTC/wE1ZD0Ca5ZIXV:L7LOS2opPIXV

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  d0cdc133ccb1908bece8c6059ba207f87b85d15e69a08bf1b362f99bd2c072ff
- Size
  
  724KB
- MD5
  
  61fdbd5ba84727f09603668996f18a4b
- SHA1
  
  9aaefe6405b2230a16a96bc2e9ff999548b554c6
- SHA256
  
  d0cdc133ccb1908bece8c6059ba207f87b85d15e69a08bf1b362f99bd2c072ff
- SHA512
  
  4e5ece2a33414a5de41fdd5dbacbe2abd8559f9010de9b27cf17f5b23fbe7bc49c55dd0d29d269388d176a7b3dce4ce989c3573102ca5478646650276f570833
- SSDEEP
  
  12288:LaSfC6Aj+TN5uixZN+8rKhUdTC/wE1ZD0Ca5ZIXV:L7LOS2opPIXV
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2