0dd1a0f8d204dc6ad2473a0f1cd7f7c1b2cf6967c39a62487ecf8969a81e47f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dd1a0f8d204dc6ad2473a0f1cd7f7c1b2cf6967c39a62487ecf8969a81e47f8
Size

2.0MB
Sample

240824-ax36wawdpa
MD5

9dd2561bd655399819b02011a2354cdf
SHA1

cbb7c78293c3a6e5ba2a177af50cb4d6b08108ec
SHA256

0dd1a0f8d204dc6ad2473a0f1cd7f7c1b2cf6967c39a62487ecf8969a81e47f8
SHA512

fef4e4b0c9b331548ed0c3f64b611ef7e7b349d8033c7de8ac9eb434fb46a11bd1176c05c471806dddda5a9dd190979bc4965d9290e9b2daa91d419fd359fe37
SSDEEP

49152:FVAbwXN2neoFmNWAAtFa1jZrtMnQCFvO9v2j:zA8cnz48PBnQcmvS

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  0dd1a0f8d204dc6ad2473a0f1cd7f7c1b2cf6967c39a62487ecf8969a81e47f8
- Size
  
  2.0MB
- MD5
  
  9dd2561bd655399819b02011a2354cdf
- SHA1
  
  cbb7c78293c3a6e5ba2a177af50cb4d6b08108ec
- SHA256
  
  0dd1a0f8d204dc6ad2473a0f1cd7f7c1b2cf6967c39a62487ecf8969a81e47f8
- SHA512
  
  fef4e4b0c9b331548ed0c3f64b611ef7e7b349d8033c7de8ac9eb434fb46a11bd1176c05c471806dddda5a9dd190979bc4965d9290e9b2daa91d419fd359fe37
- SSDEEP
  
  49152:FVAbwXN2neoFmNWAAtFa1jZrtMnQCFvO9v2j:zA8cnz48PBnQcmvS
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer