d78ab6d9a8574207668d5c80b9ed294b49d97645572247c3f93e41e9d2f8682a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d78ab6d9a8574207668d5c80b9ed294b49d97645572247c3f93e41e9d2f8682a
Size

33KB
Sample

240712-psvfhawcka
MD5

5910701a0a876d3bc74907c1eff1b580
SHA1

57ebb749a0c691ee683993fc9c456136d2afae40
SHA256

d78ab6d9a8574207668d5c80b9ed294b49d97645572247c3f93e41e9d2f8682a
SHA512

e03ca506d074e47bac87c2a7f111a7b41cc58ffe040c4d3bd6e78efaaa0231c6169f0e35d91c8693bf2f5f79b97ac46dfb7459aef1175db3fd811377d6a3a67c
SSDEEP

768:KjO5RroZJ76739sBWs69a7zKHOrEz+mKLtOWD:Kje+Zk78UKUW

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  d78ab6d9a8574207668d5c80b9ed294b49d97645572247c3f93e41e9d2f8682a
- Size
  
  33KB
- MD5
  
  5910701a0a876d3bc74907c1eff1b580
- SHA1
  
  57ebb749a0c691ee683993fc9c456136d2afae40
- SHA256
  
  d78ab6d9a8574207668d5c80b9ed294b49d97645572247c3f93e41e9d2f8682a
- SHA512
  
  e03ca506d074e47bac87c2a7f111a7b41cc58ffe040c4d3bd6e78efaaa0231c6169f0e35d91c8693bf2f5f79b97ac46dfb7459aef1175db3fd811377d6a3a67c
- SSDEEP
  
  768:KjO5RroZJ76739sBWs69a7zKHOrEz+mKLtOWD:Kje+Zk78UKUW
Score

7^/10

spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2