51012b3dc1a3052f5fb58ed1740f34cd089669b2d84fe051bf4aaff390870752 | Triage

Sharing

General

Target

51012b3dc1a3052f5fb58ed1740f34cd089669b2d84fe051bf4aaff390870752
Size

2.0MB
Sample

240808-hnnzla1blq
MD5

5830c0775b887a19fd4c5ee748653e09
SHA1

f81859952083ea2200028ac7c06768bcbf677e44
SHA256

51012b3dc1a3052f5fb58ed1740f34cd089669b2d84fe051bf4aaff390870752
SHA512

924cb5580625a61d0b0a892acaa95e9c67403862fc6fc29a4b85f388313236c3f5d048416c7c50e72aa7a8dfdae548ec88df76c545657384923ba40df8a74f0a
SSDEEP

49152:gVAbwCTx2h3bfEF337LYkDNqxyAnEnNZeZpWV41ktqwaqawPoSSXPbOv:MARTsrfEd379NwyAENZe68kKKoRqv

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  51012b3dc1a3052f5fb58ed1740f34cd089669b2d84fe051bf4aaff390870752
- Size
  
  2.0MB
- MD5
  
  5830c0775b887a19fd4c5ee748653e09
- SHA1
  
  f81859952083ea2200028ac7c06768bcbf677e44
- SHA256
  
  51012b3dc1a3052f5fb58ed1740f34cd089669b2d84fe051bf4aaff390870752
- SHA512
  
  924cb5580625a61d0b0a892acaa95e9c67403862fc6fc29a4b85f388313236c3f5d048416c7c50e72aa7a8dfdae548ec88df76c545657384923ba40df8a74f0a
- SSDEEP
  
  49152:gVAbwCTx2h3bfEF337LYkDNqxyAnEnNZeZpWV41ktqwaqawPoSSXPbOv:MARTsrfEd379NwyAENZe68kKKoRqv
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer