5905b8d098543ee50c83e04446df250fee4f8164bd92f4589d4213af0691188d | Triage

Sharing

General

Target

5905b8d098543ee50c83e04446df250fee4f8164bd92f4589d4213af0691188d
Size

3.1MB
Sample

240817-cz62nawamq
MD5

69b5fde2e7fea17662de76e3d9dfd414
SHA1

5d0adc3bb6a82374c82d210364e4ff0e2408bfac
SHA256

5905b8d098543ee50c83e04446df250fee4f8164bd92f4589d4213af0691188d
SHA512

6b1112e6deb2b1e40a4cf2e8ce689bacb1ffc3aa00c2b1784bda02fc613e1954065d08ebb0462d7f9cd352bfa8baea83e2dd9ade8d4b299850048303436b9f27
SSDEEP

49152:4VAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:0A7VyRPS7MLq4ykF09+riyXWz6Ha

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  5905b8d098543ee50c83e04446df250fee4f8164bd92f4589d4213af0691188d
- Size
  
  3.1MB
- MD5
  
  69b5fde2e7fea17662de76e3d9dfd414
- SHA1
  
  5d0adc3bb6a82374c82d210364e4ff0e2408bfac
- SHA256
  
  5905b8d098543ee50c83e04446df250fee4f8164bd92f4589d4213af0691188d
- SHA512
  
  6b1112e6deb2b1e40a4cf2e8ce689bacb1ffc3aa00c2b1784bda02fc613e1954065d08ebb0462d7f9cd352bfa8baea83e2dd9ade8d4b299850048303436b9f27
- SSDEEP
  
  49152:4VAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:0A7VyRPS7MLq4ykF09+riyXWz6Ha
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer