cc341e7b38bface9030fda395c9b11e2b21b76130066c3ba08edb7cbc2af6769 | Triage

Sharing

General

Target

cc341e7b38bface9030fda395c9b11e2b21b76130066c3ba08edb7cbc2af6769
Size

3.1MB
Sample

240822-26wlyasgjc
MD5

91ce51c1417bde8183be4364a06d7abd
SHA1

8f1ca00f5c9ba1ed3ed2aabc145a4f01547d4b39
SHA256

cc341e7b38bface9030fda395c9b11e2b21b76130066c3ba08edb7cbc2af6769
SHA512

fe6639f65622e241d2b7613865f9e9524e5955d131e25f252afda23aab9e25e129532164cb492f025798cdb164bf7c0b321d4616a41d932066693e0d5305889f
SSDEEP

49152:aVAbwWYb12jHSVaHO3Vg3gfRv9yuqohghbpVOpmV4w1Z6nPI4gyJv:uAJY5oHhb0FqWgFQlw2w4gG

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  cc341e7b38bface9030fda395c9b11e2b21b76130066c3ba08edb7cbc2af6769
- Size
  
  3.1MB
- MD5
  
  91ce51c1417bde8183be4364a06d7abd
- SHA1
  
  8f1ca00f5c9ba1ed3ed2aabc145a4f01547d4b39
- SHA256
  
  cc341e7b38bface9030fda395c9b11e2b21b76130066c3ba08edb7cbc2af6769
- SHA512
  
  fe6639f65622e241d2b7613865f9e9524e5955d131e25f252afda23aab9e25e129532164cb492f025798cdb164bf7c0b321d4616a41d932066693e0d5305889f
- SSDEEP
  
  49152:aVAbwWYb12jHSVaHO3Vg3gfRv9yuqohghbpVOpmV4w1Z6nPI4gyJv:uAJY5oHhb0FqWgFQlw2w4gG
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer