7d713f1c35657fb7ded9aa2f9180c67107b9f834e57c02e24340c30bd44e59dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d713f1c35657fb7ded9aa2f9180c67107b9f834e57c02e24340c30bd44e59dd
Size

3.2MB
Sample

240627-3dk56szhqj
MD5

6a99b251b0b0832f0e0aa059534d3e26
SHA1

90a25f9566df3517a45f609aa81030f601f47154
SHA256

7d713f1c35657fb7ded9aa2f9180c67107b9f834e57c02e24340c30bd44e59dd
SHA512

6e653aeb9a6219b8d5f890c34a3869e6b60c9d87ec540bd011dcfbd251a1a606050f354b9a5ff8697a6aaf6b3d3e97f535aeb154780b2a0326527081dd705018
SSDEEP

49152:AZgBYCjUdWOm/sTu0JnCcuwTA5EZf+fDy08DI:AavjUQOssTu0J3uwTAfDy08DI

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  7d713f1c35657fb7ded9aa2f9180c67107b9f834e57c02e24340c30bd44e59dd
- Size
  
  3.2MB
- MD5
  
  6a99b251b0b0832f0e0aa059534d3e26
- SHA1
  
  90a25f9566df3517a45f609aa81030f601f47154
- SHA256
  
  7d713f1c35657fb7ded9aa2f9180c67107b9f834e57c02e24340c30bd44e59dd
- SHA512
  
  6e653aeb9a6219b8d5f890c34a3869e6b60c9d87ec540bd011dcfbd251a1a606050f354b9a5ff8697a6aaf6b3d3e97f535aeb154780b2a0326527081dd705018
- SSDEEP
  
  49152:AZgBYCjUdWOm/sTu0JnCcuwTA5EZf+fDy08DI:AavjUQOssTu0J3uwTAfDy08DI
Score

7^/10

persistence spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2