2900a98c43b4953931afb8960bdb41cd31c7908225a348c6447517da73d4e790 | Triage

Sharing

General

Target

2900a98c43b4953931afb8960bdb41cd31c7908225a348c6447517da73d4e790
Size

97KB
Sample

240709-k5ylgawdnm
MD5

8688650dafdae35251b5aa87f7f4af3d
SHA1

b8f01fa607f9416e717b346071207f37df157cb5
SHA256

2900a98c43b4953931afb8960bdb41cd31c7908225a348c6447517da73d4e790
SHA512

27ca953d44f1f1ab4675e161e6b83d0488c21bb964e28c6168f8a88ac943e4d0e22c8cbc0f406489a3c78cd4a634258199881398f64b931070793c2fd17ee720
SSDEEP

1536:eNPrPrBcx1ae9n40g9i/qo6SKHXf88qP2CsRdxgwGGCIOunToIfiWdN:eLfZQioJK3f8l2CHRGgKTBfik

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2900a98c43b4953931afb8960bdb41cd31c7908225a348c6447517da73d4e790
- Size
  
  97KB
- MD5
  
  8688650dafdae35251b5aa87f7f4af3d
- SHA1
  
  b8f01fa607f9416e717b346071207f37df157cb5
- SHA256
  
  2900a98c43b4953931afb8960bdb41cd31c7908225a348c6447517da73d4e790
- SHA512
  
  27ca953d44f1f1ab4675e161e6b83d0488c21bb964e28c6168f8a88ac943e4d0e22c8cbc0f406489a3c78cd4a634258199881398f64b931070793c2fd17ee720
- SSDEEP
  
  1536:eNPrPrBcx1ae9n40g9i/qo6SKHXf88qP2CsRdxgwGGCIOunToIfiWdN:eLfZQioJK3f8l2CHRGgKTBfik
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2