6f2f3351e5a9f8113f36db38b56318faa848defdf733948cc636e18c0cefc06a | Triage

Sharing

General

Target

6f2f3351e5a9f8113f36db38b56318faa848defdf733948cc636e18c0cefc06a
Size

33KB
Sample

240531-y96pjacc3v
MD5

522328a63deefd58df4a5c342b18d3a3
SHA1

0574e197a7f9c3c4314c86604ff9247f85718a1d
SHA256

6f2f3351e5a9f8113f36db38b56318faa848defdf733948cc636e18c0cefc06a
SHA512

30dddf759bc229be19068fdc916388d2e96568edec6e67f1ed767562498831707dbcd114fca750da6bf8ab7eaba10b8b92707c6a6cad622c99756ca1b48c9145
SSDEEP

768:mYBPLQh+Vxr1x5cE9Fl5pz8UOutDlMXaoSunjXWNN:/Bqsrz8VuJlMXaDuiN

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  6f2f3351e5a9f8113f36db38b56318faa848defdf733948cc636e18c0cefc06a
- Size
  
  33KB
- MD5
  
  522328a63deefd58df4a5c342b18d3a3
- SHA1
  
  0574e197a7f9c3c4314c86604ff9247f85718a1d
- SHA256
  
  6f2f3351e5a9f8113f36db38b56318faa848defdf733948cc636e18c0cefc06a
- SHA512
  
  30dddf759bc229be19068fdc916388d2e96568edec6e67f1ed767562498831707dbcd114fca750da6bf8ab7eaba10b8b92707c6a6cad622c99756ca1b48c9145
- SSDEEP
  
  768:mYBPLQh+Vxr1x5cE9Fl5pz8UOutDlMXaoSunjXWNN:/Bqsrz8VuJlMXaDuiN
Score

7^/10

spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2