73141311c62e269e0c546e341d6c30030defdc3c2d893b0bcb36e77c0ca144ff | Triage

Sharing

General

Target

73141311c62e269e0c546e341d6c30030defdc3c2d893b0bcb36e77c0ca144ff
Size

33KB
Sample

240719-fj83vsxanh
MD5

820143c947ab5434bd7b8c34ba5dc5eb
SHA1

a5a2bf184cd3660354e5737bf3fce81b4ad48617
SHA256

73141311c62e269e0c546e341d6c30030defdc3c2d893b0bcb36e77c0ca144ff
SHA512

291081637d5f02a2b72d566ebca598b41f5eb080231923523b221f1e2a770341c1b73c3f3115c70018b30fef74e89738db4d670741a4eade1fadd9a5ca9e211e
SSDEEP

768:JTJYmMUElOIEvzMXqtwp/lDTJg/MFksCRsd2u9C9MFWoVaZel:JT/aYzMXqtGN/CstC9qVF

Score

8^/10

spyware stealer

Malware Config

Targets

- Target
  
  73141311c62e269e0c546e341d6c30030defdc3c2d893b0bcb36e77c0ca144ff
- Size
  
  33KB
- MD5
  
  820143c947ab5434bd7b8c34ba5dc5eb
- SHA1
  
  a5a2bf184cd3660354e5737bf3fce81b4ad48617
- SHA256
  
  73141311c62e269e0c546e341d6c30030defdc3c2d893b0bcb36e77c0ca144ff
- SHA512
  
  291081637d5f02a2b72d566ebca598b41f5eb080231923523b221f1e2a770341c1b73c3f3115c70018b30fef74e89738db4d670741a4eade1fadd9a5ca9e211e
- SSDEEP
  
  768:JTJYmMUElOIEvzMXqtwp/lDTJg/MFksCRsd2u9C9MFWoVaZel:JT/aYzMXqtGN/CstC9qVF
Score

8^/10

spyware stealer
- Drops file in Drivers directory
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2