650913eb1e1a7a43ccf7ae267c0ed375f742a4eddcf756115f2f7a7fea2532c1 | Triage

Sharing

General

Target

650913eb1e1a7a43ccf7ae267c0ed375f742a4eddcf756115f2f7a7fea2532c1
Size

3.1MB
Sample

240818-b7g7tsyeka
MD5

af313fc860fff2a10272d7631bbe5966
SHA1

6b4b8a8e440783ffe08e1825ef64bfd2df1a6438
SHA256

650913eb1e1a7a43ccf7ae267c0ed375f742a4eddcf756115f2f7a7fea2532c1
SHA512

a63a89e9e23777f5a5932da324542f6cc2866e610492d847cb15df85145e641c7d9ed44c315fb1251fe26e3605f11480a104527184e95811ceb6537cd71b0aa4
SSDEEP

49152:/VAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:9A7VyRPS7MLq4ykF09+riyXWz6Ha

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  650913eb1e1a7a43ccf7ae267c0ed375f742a4eddcf756115f2f7a7fea2532c1
- Size
  
  3.1MB
- MD5
  
  af313fc860fff2a10272d7631bbe5966
- SHA1
  
  6b4b8a8e440783ffe08e1825ef64bfd2df1a6438
- SHA256
  
  650913eb1e1a7a43ccf7ae267c0ed375f742a4eddcf756115f2f7a7fea2532c1
- SHA512
  
  a63a89e9e23777f5a5932da324542f6cc2866e610492d847cb15df85145e641c7d9ed44c315fb1251fe26e3605f11480a104527184e95811ceb6537cd71b0aa4
- SSDEEP
  
  49152:/VAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:9A7VyRPS7MLq4ykF09+riyXWz6Ha
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer