a20f660f6414fd7b5806badbeac47d7fab0fb797f7c2300cfe0dba0fcf5a88a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a20f660f6414fd7b5806badbeac47d7fab0fb797f7c2300cfe0dba0fcf5a88a6
Size

247KB
Sample

240611-bqa27aycmg
MD5

b80f99036579125018bd16ba4f10a38e
SHA1

382d9c7519c0c44ab5e41efc50fb37ab5d27eb09
SHA256

a20f660f6414fd7b5806badbeac47d7fab0fb797f7c2300cfe0dba0fcf5a88a6
SHA512

74a80fe9a35a59cc06a2bdacadb6d7b9fbecd93d1a1c4769b3aa90ded5d2a404210e0af39e6f95e7dbfc8c1750b2458c26de9f6562637b13111516d5544cd3d0
SSDEEP

3072:6D5hT7lKb2fldRMtyyYyzwCv2gs3NX0oX:6DL7lKbAlMg/yzNG

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  a20f660f6414fd7b5806badbeac47d7fab0fb797f7c2300cfe0dba0fcf5a88a6
- Size
  
  247KB
- MD5
  
  b80f99036579125018bd16ba4f10a38e
- SHA1
  
  382d9c7519c0c44ab5e41efc50fb37ab5d27eb09
- SHA256
  
  a20f660f6414fd7b5806badbeac47d7fab0fb797f7c2300cfe0dba0fcf5a88a6
- SHA512
  
  74a80fe9a35a59cc06a2bdacadb6d7b9fbecd93d1a1c4769b3aa90ded5d2a404210e0af39e6f95e7dbfc8c1750b2458c26de9f6562637b13111516d5544cd3d0
- SSDEEP
  
  3072:6D5hT7lKb2fldRMtyyYyzwCv2gs3NX0oX:6DL7lKbAlMg/yzNG
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2