8200b2364cca2565745d4678c2fe461e93b5aa323858adfc849e4d5e1d592330 | Triage

Sharing

General

Target

8200b2364cca2565745d4678c2fe461e93b5aa323858adfc849e4d5e1d592330
Size

97KB
Sample

240614-wvrkysvfqp
MD5

b101d637f86434f7d6485a3ffbaa4b6a
SHA1

c8cf249655cd0eb7b9f08e0b037bd19546622388
SHA256

8200b2364cca2565745d4678c2fe461e93b5aa323858adfc849e4d5e1d592330
SHA512

04a97108f5db7ccfb65926a8ca99f95fddd7d2b9e71d7e1140d68c3f33ed0feba94c818cada233dd4560165fbfb001e78399cd952e137f3204760d58da9067eb
SSDEEP

1536:/BNsrz8VuJlMXaDuiNYf88qP2CsRdxgwGGCIOunToIfiWdN:/BA8ulMXaK/f8l2CHRGgKTBfik

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  8200b2364cca2565745d4678c2fe461e93b5aa323858adfc849e4d5e1d592330
- Size
  
  97KB
- MD5
  
  b101d637f86434f7d6485a3ffbaa4b6a
- SHA1
  
  c8cf249655cd0eb7b9f08e0b037bd19546622388
- SHA256
  
  8200b2364cca2565745d4678c2fe461e93b5aa323858adfc849e4d5e1d592330
- SHA512
  
  04a97108f5db7ccfb65926a8ca99f95fddd7d2b9e71d7e1140d68c3f33ed0feba94c818cada233dd4560165fbfb001e78399cd952e137f3204760d58da9067eb
- SSDEEP
  
  1536:/BNsrz8VuJlMXaDuiNYf88qP2CsRdxgwGGCIOunToIfiWdN:/BA8ulMXaK/f8l2CHRGgKTBfik
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2