fc2b95740d4ead0075f3441bbbc72257f8a55e0782a8946c80847025b897837c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc2b95740d4ead0075f3441bbbc72257f8a55e0782a8946c80847025b897837c
Size

93KB
Sample

240531-x9dhbaaf4s
MD5

2a97a04834248028af1da5007ec48663
SHA1

1467c0f321971c39793999dc448bc48582d96589
SHA256

fc2b95740d4ead0075f3441bbbc72257f8a55e0782a8946c80847025b897837c
SHA512

6199cebf2c31aba99ee73087d9b2402da5a3bc5fffab3bd69c6469c61a52fd032a48a73b431024da334a0ede891c0fd5362968d46f872f54857ce6486de415b7
SSDEEP

1536:/BqYsrz8VuJlMXaDuiNDyapmebn4ddJZeY86iLflLJYEIs67rxo:/Bql8ulMXaKXLK4ddJMY86ipmns6S

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  fc2b95740d4ead0075f3441bbbc72257f8a55e0782a8946c80847025b897837c
- Size
  
  93KB
- MD5
  
  2a97a04834248028af1da5007ec48663
- SHA1
  
  1467c0f321971c39793999dc448bc48582d96589
- SHA256
  
  fc2b95740d4ead0075f3441bbbc72257f8a55e0782a8946c80847025b897837c
- SHA512
  
  6199cebf2c31aba99ee73087d9b2402da5a3bc5fffab3bd69c6469c61a52fd032a48a73b431024da334a0ede891c0fd5362968d46f872f54857ce6486de415b7
- SSDEEP
  
  1536:/BqYsrz8VuJlMXaDuiNDyapmebn4ddJZeY86iLflLJYEIs67rxo:/Bql8ulMXaKXLK4ddJMY86ipmns6S
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2