0ce4f047902c10388381f60a567b4bcf633adb45975724c0dbe8ee745d7cfa9f | Triage

Sharing

General

Target

3240d99b655ea967a64bbe3657d2ad90N.exe
Size

5.1MB
Sample

240822-zs4z2sxemc
MD5

3240d99b655ea967a64bbe3657d2ad90
SHA1

5ea87434f12af914adc0fdf2297727a5f69c0349
SHA256

0ce4f047902c10388381f60a567b4bcf633adb45975724c0dbe8ee745d7cfa9f
SHA512

db9611afe1bb91906a0aac5288c786039efa428973fd8d3df15ff285c54dda65aab20f577e68ac78e63fc809f01ee7af8cae5c23eace083bcd51fa73129d3c17
SSDEEP

98304:v0NFI6666666666666666666666666666666x666666666666666fwwwwwwwwww4:dPMki6zio75L3pf3dedO4keCIwkoYbgY

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  3240d99b655ea967a64bbe3657d2ad90N.exe
- Size
  
  5.1MB
- MD5
  
  3240d99b655ea967a64bbe3657d2ad90
- SHA1
  
  5ea87434f12af914adc0fdf2297727a5f69c0349
- SHA256
  
  0ce4f047902c10388381f60a567b4bcf633adb45975724c0dbe8ee745d7cfa9f
- SHA512
  
  db9611afe1bb91906a0aac5288c786039efa428973fd8d3df15ff285c54dda65aab20f577e68ac78e63fc809f01ee7af8cae5c23eace083bcd51fa73129d3c17
- SSDEEP
  
  98304:v0NFI6666666666666666666666666666666x666666666666666fwwwwwwwwww4:dPMki6zio75L3pf3dedO4keCIwkoYbgY
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer