b5981f73c126b02b5b8c94320835712bbfc9bd9aa035d64cf7e3973636d5316b | Triage

Sharing

General

Target

2024-05-29_efe80b610df01e82db5ef1075c37453d_mafia_revil
Size

19.6MB
Sample

240529-glq6hadd43
MD5

efe80b610df01e82db5ef1075c37453d
SHA1

697fba2b9dab221dbeea51d9938bad13ec5d50f3
SHA256

b5981f73c126b02b5b8c94320835712bbfc9bd9aa035d64cf7e3973636d5316b
SHA512

11923ec151a842b99ec4209f44478c0c2ea672bac398ea581cfa7e1c99ff51422797da5e11f007185aa70be73fdaeaae9bd0dd6505c7ae5bc12bd7fe771f8f76
SSDEEP

393216:nJw4Q+EzQk6tJsv6tWKFdu9CKAGkFlUl:JHi6jGOa

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-05-29_efe80b610df01e82db5ef1075c37453d_mafia_revil
- Size
  
  19.6MB
- MD5
  
  efe80b610df01e82db5ef1075c37453d
- SHA1
  
  697fba2b9dab221dbeea51d9938bad13ec5d50f3
- SHA256
  
  b5981f73c126b02b5b8c94320835712bbfc9bd9aa035d64cf7e3973636d5316b
- SHA512
  
  11923ec151a842b99ec4209f44478c0c2ea672bac398ea581cfa7e1c99ff51422797da5e11f007185aa70be73fdaeaae9bd0dd6505c7ae5bc12bd7fe771f8f76
- SSDEEP
  
  393216:nJw4Q+EzQk6tJsv6tWKFdu9CKAGkFlUl:JHi6jGOa
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2