4b8a478beef46ee2d53de182d54010e4fc2877625e24d664c32fce9073908903 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b8a478beef46ee2d53de182d54010e4fc2877625e24d664c32fce9073908903
Size

3.1MB
Sample

240813-1zxpzsydlf
MD5

91f6622155624b9dd49c5e01e2cb6c22
SHA1

39194df79cb4ec9d0fef5f007f219bf97e00a10f
SHA256

4b8a478beef46ee2d53de182d54010e4fc2877625e24d664c32fce9073908903
SHA512

07a853f3e0400d3555e5ff897f0114b9c597a260a16b3ef84bf05cfb4a0f015fa193a0c4507991e1631e525ae4b760a5c517d4ea46ce739d3643c1fdcd8130f8
SSDEEP

49152:2VAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:yA7VyRPS7MLq4ykF09+riyXWz6Ha

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  4b8a478beef46ee2d53de182d54010e4fc2877625e24d664c32fce9073908903
- Size
  
  3.1MB
- MD5
  
  91f6622155624b9dd49c5e01e2cb6c22
- SHA1
  
  39194df79cb4ec9d0fef5f007f219bf97e00a10f
- SHA256
  
  4b8a478beef46ee2d53de182d54010e4fc2877625e24d664c32fce9073908903
- SHA512
  
  07a853f3e0400d3555e5ff897f0114b9c597a260a16b3ef84bf05cfb4a0f015fa193a0c4507991e1631e525ae4b760a5c517d4ea46ce739d3643c1fdcd8130f8
- SSDEEP
  
  49152:2VAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:yA7VyRPS7MLq4ykF09+riyXWz6Ha
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer