969f81be6ddd74e0e22be959f9558ebb5b138420c7d2387daf8e72bc798b1e06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

969f81be6ddd74e0e22be959f9558ebb5b138420c7d2387daf8e72bc798b1e06
Size

3.1MB
Sample

240818-b1w3eaybkf
MD5

3750f9ad1dbf45620bd4e7a4b2e6f806
SHA1

4019a02005579be5de5307cc9c7fda0c65793551
SHA256

969f81be6ddd74e0e22be959f9558ebb5b138420c7d2387daf8e72bc798b1e06
SHA512

a8f1d8dfb6446deac3fed4f2e9ac5df5b1e81778469598e8475492ee0dcf9d95af4dbb53a55d3ebf062ef40cc483f94bde1df29ee5edb7c1f0dc821b9c47d2d6
SSDEEP

49152:pVAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:fA7VyRPS7MLq4ykF09+riyXWz6Ha

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  969f81be6ddd74e0e22be959f9558ebb5b138420c7d2387daf8e72bc798b1e06
- Size
  
  3.1MB
- MD5
  
  3750f9ad1dbf45620bd4e7a4b2e6f806
- SHA1
  
  4019a02005579be5de5307cc9c7fda0c65793551
- SHA256
  
  969f81be6ddd74e0e22be959f9558ebb5b138420c7d2387daf8e72bc798b1e06
- SHA512
  
  a8f1d8dfb6446deac3fed4f2e9ac5df5b1e81778469598e8475492ee0dcf9d95af4dbb53a55d3ebf062ef40cc483f94bde1df29ee5edb7c1f0dc821b9c47d2d6
- SSDEEP
  
  49152:pVAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:fA7VyRPS7MLq4ykF09+riyXWz6Ha
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer