74bd680abc5a08f8a202affff59e4ba54f50cf3ce01b807f251f7aee23cb1665 | Triage

Sharing

General

Target

74bd680abc5a08f8a202affff59e4ba54f50cf3ce01b807f251f7aee23cb1665
Size

599KB
Sample

240703-r2xckatbqf
MD5

c4678b8c19169ac0232c466f607e5d30
SHA1

02552b1de6fe492902bd9bc9753101e35eaf6468
SHA256

74bd680abc5a08f8a202affff59e4ba54f50cf3ce01b807f251f7aee23cb1665
SHA512

bdd2d9f2ceffb5b14616273a5924e45d67830c3ff2b4cb783afe67dad52b04f86a29aebef8f1f263dc78d82d82c4c2bb0356850488c14bf8628ef0580c022384
SSDEEP

12288:X3NbtfN423weiwbjCRP33GYdGffjLFdtODEff/tKRL:X3NxFLweOkfrL/tOD2E9

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  74bd680abc5a08f8a202affff59e4ba54f50cf3ce01b807f251f7aee23cb1665
- Size
  
  599KB
- MD5
  
  c4678b8c19169ac0232c466f607e5d30
- SHA1
  
  02552b1de6fe492902bd9bc9753101e35eaf6468
- SHA256
  
  74bd680abc5a08f8a202affff59e4ba54f50cf3ce01b807f251f7aee23cb1665
- SHA512
  
  bdd2d9f2ceffb5b14616273a5924e45d67830c3ff2b4cb783afe67dad52b04f86a29aebef8f1f263dc78d82d82c4c2bb0356850488c14bf8628ef0580c022384
- SSDEEP
  
  12288:X3NbtfN423weiwbjCRP33GYdGffjLFdtODEff/tKRL:X3NxFLweOkfrL/tOD2E9
Score

8^/10

spyware stealer
- Drops file in Drivers directory
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2