53adc94c291fd73ee81ed84bf3fad86bcf7c75544a946906795f71869faf1cac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53adc94c291fd73ee81ed84bf3fad86bcf7c75544a946906795f71869faf1cac
Size

2.0MB
Sample

240825-27dgra1arf
MD5

716c176c79967d599471802e1c2881ec
SHA1

8315c52dc59cd9a2e209d88e881bbfa1255cb981
SHA256

53adc94c291fd73ee81ed84bf3fad86bcf7c75544a946906795f71869faf1cac
SHA512

b863fb69e7ff0cc06198452be820f048f02ee8411b4d9b480bee6f0f769e425d42593e1b1cd29279067d16332ba90cfc348f2391cf8b72634fab7e4354d4c022
SSDEEP

49152:KVAbwUQUFD1VR+zbTPDyoW53zJJfvRCYd60p9e9bldMi:eACQZGbo1HRCYd6b9x+

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  53adc94c291fd73ee81ed84bf3fad86bcf7c75544a946906795f71869faf1cac
- Size
  
  2.0MB
- MD5
  
  716c176c79967d599471802e1c2881ec
- SHA1
  
  8315c52dc59cd9a2e209d88e881bbfa1255cb981
- SHA256
  
  53adc94c291fd73ee81ed84bf3fad86bcf7c75544a946906795f71869faf1cac
- SHA512
  
  b863fb69e7ff0cc06198452be820f048f02ee8411b4d9b480bee6f0f769e425d42593e1b1cd29279067d16332ba90cfc348f2391cf8b72634fab7e4354d4c022
- SSDEEP
  
  49152:KVAbwUQUFD1VR+zbTPDyoW53zJJfvRCYd60p9e9bldMi:eACQZGbo1HRCYd6b9x+
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer