c52426433d41ec53174953de268577b6f1e179767de3a01152936533ab008ab7 | Triage

Sharing

General

Target

118776b114d3fb8232e07fce421214b0N.exe
Size

2.0MB
Sample

240725-1j4hlawflm
MD5

118776b114d3fb8232e07fce421214b0
SHA1

174454039675e59d09b2538451afd3f1ec9b82a1
SHA256

c52426433d41ec53174953de268577b6f1e179767de3a01152936533ab008ab7
SHA512

da867a62edc0cb1caeef4fd3914fe634b8d303b2a2d6d6e0ccc11fbc79978e3fe2c8b623e7e2cc5cde376174508f06c13b0c172ee23e8ea208b7f699ea89d2d4
SSDEEP

49152:V41xsZgM/FkKCnMRhbL6su1MglBXSecjDUs8AtGtrEZAgok70bo:q1xutkdnMzijqgltSTjDH8AtGZEbv0M

Score

7^/10

discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  118776b114d3fb8232e07fce421214b0N.exe
- Size
  
  2.0MB
- MD5
  
  118776b114d3fb8232e07fce421214b0
- SHA1
  
  174454039675e59d09b2538451afd3f1ec9b82a1
- SHA256
  
  c52426433d41ec53174953de268577b6f1e179767de3a01152936533ab008ab7
- SHA512
  
  da867a62edc0cb1caeef4fd3914fe634b8d303b2a2d6d6e0ccc11fbc79978e3fe2c8b623e7e2cc5cde376174508f06c13b0c172ee23e8ea208b7f699ea89d2d4
- SSDEEP
  
  49152:V41xsZgM/FkKCnMRhbL6su1MglBXSecjDUs8AtGtrEZAgok70bo:q1xutkdnMzijqgltSTjDH8AtGZEbv0M
Score

7^/10

discovery persistence spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealer

behavioral2

discoverypersistencespywarestealer