b2240950584e3ccc6bcc2e1e7288da89fbfe405d5681e62ecd9759111eeeaf93 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2240950584e3ccc6bcc2e1e7288da89fbfe405d5681e62ecd9759111eeeaf93
Size

375KB
Sample

240530-rxz8nabg4t
MD5

4e88115286cefb4e7180e56675c14cd9
SHA1

6857cba52bcda5bef0c4c3de94a5915fd9b83c67
SHA256

b2240950584e3ccc6bcc2e1e7288da89fbfe405d5681e62ecd9759111eeeaf93
SHA512

2ddfdab62093a09662eda0a38f1935e69287dab6129a565ec09049d9f6e839b2a01f30aab3610bbe221a10139dd8ecd3ade34ce55fe1404546e85354b49fd19f
SSDEEP

6144:s/KW+aezZzU66bkWmchVySqkvAH3qo0wWJC6G/SMT4FWqC:vW+aQU66b5zhVymA/XSRh

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  b2240950584e3ccc6bcc2e1e7288da89fbfe405d5681e62ecd9759111eeeaf93
- Size
  
  375KB
- MD5
  
  4e88115286cefb4e7180e56675c14cd9
- SHA1
  
  6857cba52bcda5bef0c4c3de94a5915fd9b83c67
- SHA256
  
  b2240950584e3ccc6bcc2e1e7288da89fbfe405d5681e62ecd9759111eeeaf93
- SHA512
  
  2ddfdab62093a09662eda0a38f1935e69287dab6129a565ec09049d9f6e839b2a01f30aab3610bbe221a10139dd8ecd3ade34ce55fe1404546e85354b49fd19f
- SSDEEP
  
  6144:s/KW+aezZzU66bkWmchVySqkvAH3qo0wWJC6G/SMT4FWqC:vW+aQU66b5zhVymA/XSRh
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2