b7da66a18e8a265e5a63796f7584fdc6564d805c1af8e04cbb3eff6c3b2cb7c5 | Triage

Sharing

General

Target

b7da66a18e8a265e5a63796f7584fdc6564d805c1af8e04cbb3eff6c3b2cb7c5
Size

5.1MB
Sample

240808-hvl4ks1cnj
MD5

12437ef6de9ccda2303cfb6b0d38c2b6
SHA1

df64e2bc7809a543fbde1b225176736b49e6fbe2
SHA256

b7da66a18e8a265e5a63796f7584fdc6564d805c1af8e04cbb3eff6c3b2cb7c5
SHA512

3f14cb200e5da8973aa6972e9533c453657dcd52bd5a76b9394a2b01291e691ef61d2c13998a5ee032483d6c9e5cbbe052ab8675b7b85a38cad7ed8fd42cea64
SSDEEP

98304:z0NFA6666666666666666666666666666666x666666666666666fwwwwwwwwwwV:hPMki6zio75L3pf3dedO4keCIwkoYbg1

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  b7da66a18e8a265e5a63796f7584fdc6564d805c1af8e04cbb3eff6c3b2cb7c5
- Size
  
  5.1MB
- MD5
  
  12437ef6de9ccda2303cfb6b0d38c2b6
- SHA1
  
  df64e2bc7809a543fbde1b225176736b49e6fbe2
- SHA256
  
  b7da66a18e8a265e5a63796f7584fdc6564d805c1af8e04cbb3eff6c3b2cb7c5
- SHA512
  
  3f14cb200e5da8973aa6972e9533c453657dcd52bd5a76b9394a2b01291e691ef61d2c13998a5ee032483d6c9e5cbbe052ab8675b7b85a38cad7ed8fd42cea64
- SSDEEP
  
  98304:z0NFA6666666666666666666666666666666x666666666666666fwwwwwwwwwwV:hPMki6zio75L3pf3dedO4keCIwkoYbg1
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer