5c77dc74765c0500f1023136ee097d938ef4da166a4874db26040e69dfeac992 | Triage

Sharing

General

Target

5c77dc74765c0500f1023136ee097d938ef4da166a4874db26040e69dfeac992
Size

583KB
Sample

240525-e9rqtsef6v
MD5

3d13b844d2a2527640ed50d8da94b7b5
SHA1

77566d99b9a2938fdabcb84172496ff62957ad5a
SHA256

5c77dc74765c0500f1023136ee097d938ef4da166a4874db26040e69dfeac992
SHA512

72c8328aa9adf34c0fbc70a08a89fdb807b5b8fd19f35658d2a63f1044545668a21e0f973bbdf25221da9a8e93ccc5c6db4786d0a4702873a631e5a54adeaf92
SSDEEP

6144:mEKW+aezDE7cV3iwbAFRWAbd4nf0H05yqE6Hl0ChW0+ksllAXBu0lWGWUJJQ4t0G:m9W+aB7a3iwbihym2g7XO3LWUQfh4Co

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  5c77dc74765c0500f1023136ee097d938ef4da166a4874db26040e69dfeac992
- Size
  
  583KB
- MD5
  
  3d13b844d2a2527640ed50d8da94b7b5
- SHA1
  
  77566d99b9a2938fdabcb84172496ff62957ad5a
- SHA256
  
  5c77dc74765c0500f1023136ee097d938ef4da166a4874db26040e69dfeac992
- SHA512
  
  72c8328aa9adf34c0fbc70a08a89fdb807b5b8fd19f35658d2a63f1044545668a21e0f973bbdf25221da9a8e93ccc5c6db4786d0a4702873a631e5a54adeaf92
- SSDEEP
  
  6144:mEKW+aezDE7cV3iwbAFRWAbd4nf0H05yqE6Hl0ChW0+ksllAXBu0lWGWUJJQ4t0G:m9W+aB7a3iwbihym2g7XO3LWUQfh4Co
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2