816b927fa17027e87113bfecc465fd2907cd89d2a2bf4d0e4cbb21e7511992af | Triage

Sharing

General

Target

816b927fa17027e87113bfecc465fd2907cd89d2a2bf4d0e4cbb21e7511992af
Size

3.1MB
Sample

240809-cqyc6avfkk
MD5

45e4bb3edf330525540112da0b82931b
SHA1

b3cdb2b5d88e6c0f81869d475c777378588d3e3b
SHA256

816b927fa17027e87113bfecc465fd2907cd89d2a2bf4d0e4cbb21e7511992af
SHA512

65837863b7e0f6bb30b679bce6c3db20079ddbf2a17b5f13e18eebca9a17a16b4d64883bfe04e1b754675e2b45fb2409fc119f52b513e943b1eeae1c515d92e6
SSDEEP

49152:JNEyYYC1hqiJckG38dBFOhg5/6qF3rjb/h4CNcTCP8xphzSNtOSe+aS:nEP1y3+0hgh6u/ZcTCP8BzONaS

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  816b927fa17027e87113bfecc465fd2907cd89d2a2bf4d0e4cbb21e7511992af
- Size
  
  3.1MB
- MD5
  
  45e4bb3edf330525540112da0b82931b
- SHA1
  
  b3cdb2b5d88e6c0f81869d475c777378588d3e3b
- SHA256
  
  816b927fa17027e87113bfecc465fd2907cd89d2a2bf4d0e4cbb21e7511992af
- SHA512
  
  65837863b7e0f6bb30b679bce6c3db20079ddbf2a17b5f13e18eebca9a17a16b4d64883bfe04e1b754675e2b45fb2409fc119f52b513e943b1eeae1c515d92e6
- SSDEEP
  
  49152:JNEyYYC1hqiJckG38dBFOhg5/6qF3rjb/h4CNcTCP8xphzSNtOSe+aS:nEP1y3+0hgh6u/ZcTCP8BzONaS
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer