69894d1e944290f9eb0c4928390176e2f69cfae083fc010fd6a5d3421d80bbc9 | Triage

Sharing

General

Target

1ed28304d64274af0b0b2a26cfd544d0N.exe
Size

1.2MB
Sample

240725-2gv9waygln
MD5

1ed28304d64274af0b0b2a26cfd544d0
SHA1

ebc9b9cfa6a70d3ca6804eed67b860410a25dcb8
SHA256

69894d1e944290f9eb0c4928390176e2f69cfae083fc010fd6a5d3421d80bbc9
SHA512

7b4c1418ee4882bfcdd631f57e20ab59b175787b559b8232c1e0f11c38773415e22acf0658c079f0a3758c2f539715a0536a6f99241bb36ac84e23ad433ade82
SSDEEP

24576:2wiSc7OFbZmXxCtM/wopdFlKZU3IOQC5QQ+djKz8qcjDMu0MlxI:h0CRoXiMYozSU397mQ+RCODagI

Score

7^/10

discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  1ed28304d64274af0b0b2a26cfd544d0N.exe
- Size
  
  1.2MB
- MD5
  
  1ed28304d64274af0b0b2a26cfd544d0
- SHA1
  
  ebc9b9cfa6a70d3ca6804eed67b860410a25dcb8
- SHA256
  
  69894d1e944290f9eb0c4928390176e2f69cfae083fc010fd6a5d3421d80bbc9
- SHA512
  
  7b4c1418ee4882bfcdd631f57e20ab59b175787b559b8232c1e0f11c38773415e22acf0658c079f0a3758c2f539715a0536a6f99241bb36ac84e23ad433ade82
- SSDEEP
  
  24576:2wiSc7OFbZmXxCtM/wopdFlKZU3IOQC5QQ+djKz8qcjDMu0MlxI:h0CRoXiMYozSU397mQ+RCODagI
Score

7^/10

discovery persistence spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealer

behavioral2

discoverypersistencespywarestealer