7f4a75740a7803fdc0f562f236de088a7bfd635bde1ea7d393c9ee4039c5e835 | Triage

Sharing

General

Target

7f4a75740a7803fdc0f562f236de088a7bfd635bde1ea7d393c9ee4039c5e835
Size

66KB
Sample

240719-ejp5bavekb
MD5

57f96165491965febc86eaa504a68961
SHA1

83e14239a7e3de7030899d76f1b26a1fe4bb3429
SHA256

7f4a75740a7803fdc0f562f236de088a7bfd635bde1ea7d393c9ee4039c5e835
SHA512

f09dd1fe6802fa10c5cee1dea516331200960ed001b35ee4ea10f9c1f14794bce0ac19f1c7116bb107a7f9e210e960784c363b818608a19606a5c205db60c467
SSDEEP

768:KjO5RroZJ76739sBWs69a7zKHOrEz+mKLtOWDA8Ur9BWErx0YCPuRAj0U1hkp26x:Kje+Zk78UKUWWZoEV0JuRUFyMOaHQ1l

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  7f4a75740a7803fdc0f562f236de088a7bfd635bde1ea7d393c9ee4039c5e835
- Size
  
  66KB
- MD5
  
  57f96165491965febc86eaa504a68961
- SHA1
  
  83e14239a7e3de7030899d76f1b26a1fe4bb3429
- SHA256
  
  7f4a75740a7803fdc0f562f236de088a7bfd635bde1ea7d393c9ee4039c5e835
- SHA512
  
  f09dd1fe6802fa10c5cee1dea516331200960ed001b35ee4ea10f9c1f14794bce0ac19f1c7116bb107a7f9e210e960784c363b818608a19606a5c205db60c467
- SSDEEP
  
  768:KjO5RroZJ76739sBWs69a7zKHOrEz+mKLtOWDA8Ur9BWErx0YCPuRAj0U1hkp26x:Kje+Zk78UKUWWZoEV0JuRUFyMOaHQ1l
Score

7^/10

spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2