3a740fd49fa0f8e24df0a7fcddfc2b24922710150309aed1078484f495017e17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a740fd49fa0f8e24df0a7fcddfc2b24922710150309aed1078484f495017e17
Size

3.2MB
Sample

240805-zeeg8s1fmg
MD5

4b5948c1a2e985abeec4fe6b00f6395c
SHA1

158269e26fbc36409a66bc161d0e6b3f6b674883
SHA256

3a740fd49fa0f8e24df0a7fcddfc2b24922710150309aed1078484f495017e17
SHA512

2250a41e0a48fa8a5903e8a40c0aae2e6307d6cf03f0c09fece11dc8e5c3eddf85656ac08f26319a2dc8a91c8c12acfec6fc9998b2fe73bc25b21b16c0c8f045
SSDEEP

49152:wwHbXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4O8b8ITDnl27PLhr:zHbXsPN5kiQaZ5I

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  3a740fd49fa0f8e24df0a7fcddfc2b24922710150309aed1078484f495017e17
- Size
  
  3.2MB
- MD5
  
  4b5948c1a2e985abeec4fe6b00f6395c
- SHA1
  
  158269e26fbc36409a66bc161d0e6b3f6b674883
- SHA256
  
  3a740fd49fa0f8e24df0a7fcddfc2b24922710150309aed1078484f495017e17
- SHA512
  
  2250a41e0a48fa8a5903e8a40c0aae2e6307d6cf03f0c09fece11dc8e5c3eddf85656ac08f26319a2dc8a91c8c12acfec6fc9998b2fe73bc25b21b16c0c8f045
- SSDEEP
  
  49152:wwHbXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4O8b8ITDnl27PLhr:zHbXsPN5kiQaZ5I
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer