8ca05742f8244f60e5b3833752e1b86277572c61fac7854abc1fae96000c3452 | Triage

Sharing

General

Target

8ca05742f8244f60e5b3833752e1b86277572c61fac7854abc1fae96000c3452
Size

3.1MB
Sample

240818-3ra75a1gmf
MD5

9cb98492fca978dfb1f51e87bfc9064d
SHA1

6e44d3e9eb0525de20fe57d2adec75b5af990583
SHA256

8ca05742f8244f60e5b3833752e1b86277572c61fac7854abc1fae96000c3452
SHA512

f4f1e582b8872dfb9421858d21d77371d1768bd89eacb722d94184c5a11d2d73e5e2c8014340a1ceaf7b2d283d1abbdef946d72cda3b995a2a8840fedc139a22
SSDEEP

49152:wVAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:cA7VyRPS7MLq4ykF09+riyXWz6Ha

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  8ca05742f8244f60e5b3833752e1b86277572c61fac7854abc1fae96000c3452
- Size
  
  3.1MB
- MD5
  
  9cb98492fca978dfb1f51e87bfc9064d
- SHA1
  
  6e44d3e9eb0525de20fe57d2adec75b5af990583
- SHA256
  
  8ca05742f8244f60e5b3833752e1b86277572c61fac7854abc1fae96000c3452
- SHA512
  
  f4f1e582b8872dfb9421858d21d77371d1768bd89eacb722d94184c5a11d2d73e5e2c8014340a1ceaf7b2d283d1abbdef946d72cda3b995a2a8840fedc139a22
- SSDEEP
  
  49152:wVAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:cA7VyRPS7MLq4ykF09+riyXWz6Ha
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer