fa10f8acfbc7055568ca9850b2ce6558114ab6b3d95381383694a6fbc32743d3 | Triage

Sharing

General

Target

fa10f8acfbc7055568ca9850b2ce6558114ab6b3d95381383694a6fbc32743d3
Size

3.1MB
Sample

240825-28tv5asfjl
MD5

be593328892226823a84d29772cf7e8c
SHA1

e5bbfaab19fed50d1e5b7d95dcc33e87b24f00dd
SHA256

fa10f8acfbc7055568ca9850b2ce6558114ab6b3d95381383694a6fbc32743d3
SHA512

caef03724b2af7ba0775e6159e02c7d4ec0b39e1732984b5adfd4eb9701401d8c5ca5d2bdb0db21d8b5d0346787cd1a92a1eff50f8a91acaf9f3a4b095a0d05c
SSDEEP

98304:LAcRTd/kggQSwydThBmnXodHG+z92I0xkZV8zDzSC:PRTFkg3SwyhsXoRG+zAkZCzDz/

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  fa10f8acfbc7055568ca9850b2ce6558114ab6b3d95381383694a6fbc32743d3
- Size
  
  3.1MB
- MD5
  
  be593328892226823a84d29772cf7e8c
- SHA1
  
  e5bbfaab19fed50d1e5b7d95dcc33e87b24f00dd
- SHA256
  
  fa10f8acfbc7055568ca9850b2ce6558114ab6b3d95381383694a6fbc32743d3
- SHA512
  
  caef03724b2af7ba0775e6159e02c7d4ec0b39e1732984b5adfd4eb9701401d8c5ca5d2bdb0db21d8b5d0346787cd1a92a1eff50f8a91acaf9f3a4b095a0d05c
- SSDEEP
  
  98304:LAcRTd/kggQSwydThBmnXodHG+z92I0xkZV8zDzSC:PRTFkg3SwyhsXoRG+zAkZCzDz/
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer