d53ea22d428f94a57fff56b161effd5156c6112559d04bd0fbffbc9cf9347bb5 | Triage

Sharing

General

Target

d53ea22d428f94a57fff56b161effd5156c6112559d04bd0fbffbc9cf9347bb5
Size

3.1MB
Sample

240816-3rj52axhqq
MD5

45256a1542138cc6bbf5e05dbfbd28ff
SHA1

803d10c578073615254b41f7224a97f7c1163e92
SHA256

d53ea22d428f94a57fff56b161effd5156c6112559d04bd0fbffbc9cf9347bb5
SHA512

3342493e796aea749591a1becc8fbaa24670dab3c0c55688a66b03f577df2e28d56cc503121c2ccbaa25be3193481a968ecb261b421c237236419e44f6394ac1
SSDEEP

49152:XVAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:FA7VyRPS7MLq4ykF09+riyXWz6Ha

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  d53ea22d428f94a57fff56b161effd5156c6112559d04bd0fbffbc9cf9347bb5
- Size
  
  3.1MB
- MD5
  
  45256a1542138cc6bbf5e05dbfbd28ff
- SHA1
  
  803d10c578073615254b41f7224a97f7c1163e92
- SHA256
  
  d53ea22d428f94a57fff56b161effd5156c6112559d04bd0fbffbc9cf9347bb5
- SHA512
  
  3342493e796aea749591a1becc8fbaa24670dab3c0c55688a66b03f577df2e28d56cc503121c2ccbaa25be3193481a968ecb261b421c237236419e44f6394ac1
- SSDEEP
  
  49152:XVAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:FA7VyRPS7MLq4ykF09+riyXWz6Ha
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer