515a8fa910c0dc6e9a4a6258a3d4e363fee1b83abf883bc64c5f3785ac2057fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

515a8fa910c0dc6e9a4a6258a3d4e363fee1b83abf883bc64c5f3785ac2057fd
Size

2.0MB
Sample

240819-3xqvrswgqq
MD5

a6b1d6b9feca6708193b42f8b7bd5e31
SHA1

8e990fe885708724ec4ce8a9137aaa224fb71488
SHA256

515a8fa910c0dc6e9a4a6258a3d4e363fee1b83abf883bc64c5f3785ac2057fd
SHA512

7db2485c7d6cadb7676653431e9a5718f0d9a4277b30b8e7ad952a862bdbb78b2eb61e9fc170689565bf65cdebec821ac3c89118a6f7874b07c54fabcd893396
SSDEEP

49152:fVAbwuGwKOco09gsJcxlV8fTguPOAItUIrhO5Ov:dApQx5+Mc27g9tfoMv

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  515a8fa910c0dc6e9a4a6258a3d4e363fee1b83abf883bc64c5f3785ac2057fd
- Size
  
  2.0MB
- MD5
  
  a6b1d6b9feca6708193b42f8b7bd5e31
- SHA1
  
  8e990fe885708724ec4ce8a9137aaa224fb71488
- SHA256
  
  515a8fa910c0dc6e9a4a6258a3d4e363fee1b83abf883bc64c5f3785ac2057fd
- SHA512
  
  7db2485c7d6cadb7676653431e9a5718f0d9a4277b30b8e7ad952a862bdbb78b2eb61e9fc170689565bf65cdebec821ac3c89118a6f7874b07c54fabcd893396
- SSDEEP
  
  49152:fVAbwuGwKOco09gsJcxlV8fTguPOAItUIrhO5Ov:dApQx5+Mc27g9tfoMv
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer