c3da9ab4c8d3a2cb47985cbb300b43f1dad54213bcd46b14e6de6e387c5f0ce1 | Triage

Sharing

General

Target

c3da9ab4c8d3a2cb47985cbb300b43f1dad54213bcd46b14e6de6e387c5f0ce1
Size

3.1MB
Sample

240825-3f1zea1fpc
MD5

87bea5575a0dd65ca59d994c6a5e290f
SHA1

86226374766ea0e2f7c9d644f7c41eca972814b0
SHA256

c3da9ab4c8d3a2cb47985cbb300b43f1dad54213bcd46b14e6de6e387c5f0ce1
SHA512

5c8bc12bf182615c9b8e06657c24b02e577189f893b1e0a7a4b99bbaffce01ca3af972da8ad82d3c744f1f416e6bf9cf59eec48e3012db77258919814446ff58
SSDEEP

98304:CAcRTd/kggQSwydThBmnXodHG+z92I0xkZV8zDzSC:wRTFkg3SwyhsXoRG+zAkZCzDz/

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c3da9ab4c8d3a2cb47985cbb300b43f1dad54213bcd46b14e6de6e387c5f0ce1
- Size
  
  3.1MB
- MD5
  
  87bea5575a0dd65ca59d994c6a5e290f
- SHA1
  
  86226374766ea0e2f7c9d644f7c41eca972814b0
- SHA256
  
  c3da9ab4c8d3a2cb47985cbb300b43f1dad54213bcd46b14e6de6e387c5f0ce1
- SHA512
  
  5c8bc12bf182615c9b8e06657c24b02e577189f893b1e0a7a4b99bbaffce01ca3af972da8ad82d3c744f1f416e6bf9cf59eec48e3012db77258919814446ff58
- SSDEEP
  
  98304:CAcRTd/kggQSwydThBmnXodHG+z92I0xkZV8zDzSC:wRTFkg3SwyhsXoRG+zAkZCzDz/
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer