829e16c968513c1b450037405cabe8a43a214d11801e606b8873c8bc8c2ceefc | Triage

Sharing

General

Target

829e16c968513c1b450037405cabe8a43a214d11801e606b8873c8bc8c2ceefc
Size

5.7MB
Sample

240822-21fcrssdmb
MD5

ecd388c85d83fc52641f6ac98600a27a
SHA1

18acb62a2661446ca0ac6e85825f99d0654c1edb
SHA256

829e16c968513c1b450037405cabe8a43a214d11801e606b8873c8bc8c2ceefc
SHA512

d5edc38ff37b0df51856e1cd96d48812f2955c7afa72369157c413f7d19ca834ecaf678e9c8f22ce6aa956575f8ab7e2ac9225571b6ecc6d34a4bfbbae496f0d
SSDEEP

98304:30NFx6666666666666666666666666666666x666666666666666fwwwwwwwwwwX:idUcT+ApWkdjQgmg7Ynn30jpKca6iPdf

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  829e16c968513c1b450037405cabe8a43a214d11801e606b8873c8bc8c2ceefc
- Size
  
  5.7MB
- MD5
  
  ecd388c85d83fc52641f6ac98600a27a
- SHA1
  
  18acb62a2661446ca0ac6e85825f99d0654c1edb
- SHA256
  
  829e16c968513c1b450037405cabe8a43a214d11801e606b8873c8bc8c2ceefc
- SHA512
  
  d5edc38ff37b0df51856e1cd96d48812f2955c7afa72369157c413f7d19ca834ecaf678e9c8f22ce6aa956575f8ab7e2ac9225571b6ecc6d34a4bfbbae496f0d
- SSDEEP
  
  98304:30NFx6666666666666666666666666666666x666666666666666fwwwwwwwwwwX:idUcT+ApWkdjQgmg7Ynn30jpKca6iPdf
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer