60c508442d810c29846ebac4a4d8d7f0a226392dd85566910f810d0394abedd1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60c508442d810c29846ebac4a4d8d7f0a226392dd85566910f810d0394abedd1
Size

305KB
Sample

240527-spfdysgf5s
MD5

8f600c320c044e4f1da7593ed7d3fa9f
SHA1

4ec299e2e8daf6bffd17747e3a03fb928476a9ed
SHA256

60c508442d810c29846ebac4a4d8d7f0a226392dd85566910f810d0394abedd1
SHA512

6142046267affb5f2cd0fa08458795f0f425e9f8a86ab73a0b8b40079d876c82ed700364ec2b45e5bee1faa2fab99f6909849471862ad7423eb7ab27f581395a
SSDEEP

6144:U1qe1IS9MTi0+lfh+L5qe9T5q4GAFzWTBPMmC1UC6fOat:U1quIUMTi0uhMqe9ts2zWTpMmCG7

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  60c508442d810c29846ebac4a4d8d7f0a226392dd85566910f810d0394abedd1
- Size
  
  305KB
- MD5
  
  8f600c320c044e4f1da7593ed7d3fa9f
- SHA1
  
  4ec299e2e8daf6bffd17747e3a03fb928476a9ed
- SHA256
  
  60c508442d810c29846ebac4a4d8d7f0a226392dd85566910f810d0394abedd1
- SHA512
  
  6142046267affb5f2cd0fa08458795f0f425e9f8a86ab73a0b8b40079d876c82ed700364ec2b45e5bee1faa2fab99f6909849471862ad7423eb7ab27f581395a
- SSDEEP
  
  6144:U1qe1IS9MTi0+lfh+L5qe9T5q4GAFzWTBPMmC1UC6fOat:U1quIUMTi0uhMqe9ts2zWTpMmCG7
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2