755666523b27006592c116a90b091ad5f28308c8d85f1b6318e0ada3427d3145 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

755666523b27006592c116a90b091ad5f28308c8d85f1b6318e0ada3427d3145
Size

2.0MB
Sample

240624-f6esjaybqd
MD5

c71a84d8fc6f88fb9c0b8005c1b449e4
SHA1

93e57a6ed9d55a3575ffb2550730cae56c73dd69
SHA256

755666523b27006592c116a90b091ad5f28308c8d85f1b6318e0ada3427d3145
SHA512

ae06104195983ea37d00fa9a863af7d1620c0bd344d673527a6a394ec5253c1ed43b49540e71aa3bea727169ffa145320986a4e83e890aac6b499b3eebe43f79
SSDEEP

49152:tNEyY80FNFPy4tGmml/0947g+b9W7m6S/sbs0wQ22qPAoFmkN:LEhFvqXjbqoJQCv

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  755666523b27006592c116a90b091ad5f28308c8d85f1b6318e0ada3427d3145
- Size
  
  2.0MB
- MD5
  
  c71a84d8fc6f88fb9c0b8005c1b449e4
- SHA1
  
  93e57a6ed9d55a3575ffb2550730cae56c73dd69
- SHA256
  
  755666523b27006592c116a90b091ad5f28308c8d85f1b6318e0ada3427d3145
- SHA512
  
  ae06104195983ea37d00fa9a863af7d1620c0bd344d673527a6a394ec5253c1ed43b49540e71aa3bea727169ffa145320986a4e83e890aac6b499b3eebe43f79
- SSDEEP
  
  49152:tNEyY80FNFPy4tGmml/0947g+b9W7m6S/sbs0wQ22qPAoFmkN:LEhFvqXjbqoJQCv
Score

8^/10

spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2