77ca61b0a1272eef1748090afab2905285a8a6ba8ba71ff302087eedb5810841 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77ca61b0a1272eef1748090afab2905285a8a6ba8ba71ff302087eedb5810841
Size

273KB
Sample

240611-lf6q8asfkn
MD5

dac16cc836b331530ddd3fcee923bbcc
SHA1

25dd9fdd506ffd633e908ae0e82c3d02c45ccb8c
SHA256

77ca61b0a1272eef1748090afab2905285a8a6ba8ba71ff302087eedb5810841
SHA512

bca50b17ead01e43cd955eb5a21168abaaa6af0003ee881b2f669fc830da4fa9d4868577fdd13fbb410db03dec60f2e0fa0abcb397415abbefc36ec8c5d01942
SSDEEP

3072:jWhZ406dHnD61kLRkgUA1nQZwFGVO4Mqg+WDY:aZ40PkLRp1nQ4QLd

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  77ca61b0a1272eef1748090afab2905285a8a6ba8ba71ff302087eedb5810841
- Size
  
  273KB
- MD5
  
  dac16cc836b331530ddd3fcee923bbcc
- SHA1
  
  25dd9fdd506ffd633e908ae0e82c3d02c45ccb8c
- SHA256
  
  77ca61b0a1272eef1748090afab2905285a8a6ba8ba71ff302087eedb5810841
- SHA512
  
  bca50b17ead01e43cd955eb5a21168abaaa6af0003ee881b2f669fc830da4fa9d4868577fdd13fbb410db03dec60f2e0fa0abcb397415abbefc36ec8c5d01942
- SSDEEP
  
  3072:jWhZ406dHnD61kLRkgUA1nQZwFGVO4Mqg+WDY:aZ40PkLRp1nQ4QLd
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2