25ba409f54719204b0cc95c4f522e39892c2cf19acb35df862bf9c47556c1c45 | Triage

Sharing

General

Target

25ba409f54719204b0cc95c4f522e39892c2cf19acb35df862bf9c47556c1c45
Size

33KB
Sample

240522-y5hf5sfc74
MD5

54bf44306953a5b6f406e5540e60c7b4
SHA1

5252474cc785229e8b958668a72650a1d5777a4d
SHA256

25ba409f54719204b0cc95c4f522e39892c2cf19acb35df862bf9c47556c1c45
SHA512

17e48d33e3012ae8790af9677434dbbad419c6876388c4b4c9e7178d582e7967b63b5107a85e5a4062656241006c1d6d8d5183f0e20b1a3aa2cb6eff5abf176f
SSDEEP

768:JIm84UElOIEvzMXqtwp/lDTJg/MFksCRsd2u9C9MFWoVaZel:JZ84UaYzMXqtGN/CstC9qVF

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  25ba409f54719204b0cc95c4f522e39892c2cf19acb35df862bf9c47556c1c45
- Size
  
  33KB
- MD5
  
  54bf44306953a5b6f406e5540e60c7b4
- SHA1
  
  5252474cc785229e8b958668a72650a1d5777a4d
- SHA256
  
  25ba409f54719204b0cc95c4f522e39892c2cf19acb35df862bf9c47556c1c45
- SHA512
  
  17e48d33e3012ae8790af9677434dbbad419c6876388c4b4c9e7178d582e7967b63b5107a85e5a4062656241006c1d6d8d5183f0e20b1a3aa2cb6eff5abf176f
- SSDEEP
  
  768:JIm84UElOIEvzMXqtwp/lDTJg/MFksCRsd2u9C9MFWoVaZel:JZ84UaYzMXqtGN/CstC9qVF
Score

8^/10

spyware stealer
- Drops file in Drivers directory
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2