063ce4b11d629d0a7618e506c77344b97468709baa75629083bc27cc3a9d18a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

063ce4b11d629d0a7618e506c77344b97468709baa75629083bc27cc3a9d18a7
Size

2.0MB
Sample

240823-abwvnsvcnf
MD5

ab8518eadb42efeb50c49c6027d3ff91
SHA1

cbbc7940782fa16360d5edd47a23deeb7cf1fd50
SHA256

063ce4b11d629d0a7618e506c77344b97468709baa75629083bc27cc3a9d18a7
SHA512

1154eb80dfc3830e677daf06fa9bf793c22796ce5c784a9b9160408d2e56ed00dafd5943f8beb8d85a01fca9b958ad02d3144c081465a6b62b45a40a68bd99f2
SSDEEP

49152:lVAbwXN2neoFmNWAAtFa1jZrtMnQCFvO9v2j:TA8cnz48PBnQcmvS

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  063ce4b11d629d0a7618e506c77344b97468709baa75629083bc27cc3a9d18a7
- Size
  
  2.0MB
- MD5
  
  ab8518eadb42efeb50c49c6027d3ff91
- SHA1
  
  cbbc7940782fa16360d5edd47a23deeb7cf1fd50
- SHA256
  
  063ce4b11d629d0a7618e506c77344b97468709baa75629083bc27cc3a9d18a7
- SHA512
  
  1154eb80dfc3830e677daf06fa9bf793c22796ce5c784a9b9160408d2e56ed00dafd5943f8beb8d85a01fca9b958ad02d3144c081465a6b62b45a40a68bd99f2
- SSDEEP
  
  49152:lVAbwXN2neoFmNWAAtFa1jZrtMnQCFvO9v2j:TA8cnz48PBnQcmvS
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer