4cfb758bc8d779a7e4f3f549286ac83c8b98d5104f3efa056d8729462bf1645c | Triage

Sharing

General

Target

4cfb758bc8d779a7e4f3f549286ac83c8b98d5104f3efa056d8729462bf1645c
Size

33KB
Sample

240604-y9ssnsad7s
MD5

3905de443e3362c9a3cf7a99ec967853
SHA1

fad6b90d31da3df8c885fac5d78de93bec539fec
SHA256

4cfb758bc8d779a7e4f3f549286ac83c8b98d5104f3efa056d8729462bf1645c
SHA512

151968a824d131913cec483882b9a636aaa1202647f703b376b495e09f3ac1377aed756e85a449613a9cea4487cf9522ec2951e00ecb095e709eb55d21fe4183
SSDEEP

768:mYBuC+Vxr1x5cE9Fl5pz8UOutDlMXaoSunjXWNN:/BVsrz8VuJlMXaDuiN

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  4cfb758bc8d779a7e4f3f549286ac83c8b98d5104f3efa056d8729462bf1645c
- Size
  
  33KB
- MD5
  
  3905de443e3362c9a3cf7a99ec967853
- SHA1
  
  fad6b90d31da3df8c885fac5d78de93bec539fec
- SHA256
  
  4cfb758bc8d779a7e4f3f549286ac83c8b98d5104f3efa056d8729462bf1645c
- SHA512
  
  151968a824d131913cec483882b9a636aaa1202647f703b376b495e09f3ac1377aed756e85a449613a9cea4487cf9522ec2951e00ecb095e709eb55d21fe4183
- SSDEEP
  
  768:mYBuC+Vxr1x5cE9Fl5pz8UOutDlMXaoSunjXWNN:/BVsrz8VuJlMXaDuiN
Score

7^/10

spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2