beb928ec14520605468b2116f72b7039f5477f305020750883ed8c39301270e5 | Triage

Sharing

General

Target

beb928ec14520605468b2116f72b7039f5477f305020750883ed8c39301270e5
Size

2.0MB
Sample

240624-gfwh2asbkq
MD5

bec24d042cee62a94407e950ae8e9529
SHA1

e454285e4bd9c6c6e9507a6313a4391d006816fc
SHA256

beb928ec14520605468b2116f72b7039f5477f305020750883ed8c39301270e5
SHA512

7d6da81fecd3028abd263790729de719d53bb894cf0cd74a9689102908ee359537f6bd9b4a2046ca28c2eb61e882d692bdd1ac33b6db811f13bbc2c3ac2dc2de
SSDEEP

49152:HNEyY80FNFPy4tGmml/0947g+b9W7m6S/sbs0wQ22qPAoFmk9:tEhFvqXjbqoJQC3

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  beb928ec14520605468b2116f72b7039f5477f305020750883ed8c39301270e5
- Size
  
  2.0MB
- MD5
  
  bec24d042cee62a94407e950ae8e9529
- SHA1
  
  e454285e4bd9c6c6e9507a6313a4391d006816fc
- SHA256
  
  beb928ec14520605468b2116f72b7039f5477f305020750883ed8c39301270e5
- SHA512
  
  7d6da81fecd3028abd263790729de719d53bb894cf0cd74a9689102908ee359537f6bd9b4a2046ca28c2eb61e882d692bdd1ac33b6db811f13bbc2c3ac2dc2de
- SSDEEP
  
  49152:HNEyY80FNFPy4tGmml/0947g+b9W7m6S/sbs0wQ22qPAoFmk9:tEhFvqXjbqoJQC3
Score

8^/10

spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2