f3508ffebc93bc889dafb318959758f3378fb4ae3a43f35891de3c564982947f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3508ffebc93bc889dafb318959758f3378fb4ae3a43f35891de3c564982947f
Size

2.0MB
Sample

240624-gpd1casdjl
MD5

e9352600c6313c2f51d81aef10bde4c9
SHA1

59e02500bc564459efaa84a993a8e84417b7c40e
SHA256

f3508ffebc93bc889dafb318959758f3378fb4ae3a43f35891de3c564982947f
SHA512

dee54dbef33552d83114e9fa79ad6a1f39e62b47dce59f84b924f0f5729f88b711cf8b6f7430e4fdbb0a4268a3762bf72415b0c0146e94afc111a3f300d12497
SSDEEP

49152:PNEyY80FNFPy4tGmml/0947g+b9W7m6S/sbs0wQ22qPAoFmk4:lEhFvqXjbqoJQCO

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  f3508ffebc93bc889dafb318959758f3378fb4ae3a43f35891de3c564982947f
- Size
  
  2.0MB
- MD5
  
  e9352600c6313c2f51d81aef10bde4c9
- SHA1
  
  59e02500bc564459efaa84a993a8e84417b7c40e
- SHA256
  
  f3508ffebc93bc889dafb318959758f3378fb4ae3a43f35891de3c564982947f
- SHA512
  
  dee54dbef33552d83114e9fa79ad6a1f39e62b47dce59f84b924f0f5729f88b711cf8b6f7430e4fdbb0a4268a3762bf72415b0c0146e94afc111a3f300d12497
- SSDEEP
  
  49152:PNEyY80FNFPy4tGmml/0947g+b9W7m6S/sbs0wQ22qPAoFmk4:lEhFvqXjbqoJQCO
Score

8^/10

spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2