527fe7d723ee8f9c16a82be6bc4eb0977450a59b3b120e78928b6a235ea93185 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

527fe7d723ee8f9c16a82be6bc4eb0977450a59b3b120e78928b6a235ea93185
Size

3.1MB
Sample

240826-ab39rashmc
MD5

6f86e84e0da5e76926b11f92e317a378
SHA1

5d84bf4f041abcf084f21a72c22e15581df226c6
SHA256

527fe7d723ee8f9c16a82be6bc4eb0977450a59b3b120e78928b6a235ea93185
SHA512

d99ad3b2fde7fb14046ec63d03b9915adf7fc6ca7da234f1ccb62d05e78349c27d87ba09a0abf48eaccabf95d1568cd8e702569b903fbc6f1c7a197285ff0c3b
SSDEEP

98304:NAcRTd/kggQSwydThBmnXodHG+z92I0xkZV8zDzSC:dRTFkg3SwyhsXoRG+zAkZCzDz/

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  527fe7d723ee8f9c16a82be6bc4eb0977450a59b3b120e78928b6a235ea93185
- Size
  
  3.1MB
- MD5
  
  6f86e84e0da5e76926b11f92e317a378
- SHA1
  
  5d84bf4f041abcf084f21a72c22e15581df226c6
- SHA256
  
  527fe7d723ee8f9c16a82be6bc4eb0977450a59b3b120e78928b6a235ea93185
- SHA512
  
  d99ad3b2fde7fb14046ec63d03b9915adf7fc6ca7da234f1ccb62d05e78349c27d87ba09a0abf48eaccabf95d1568cd8e702569b903fbc6f1c7a197285ff0c3b
- SSDEEP
  
  98304:NAcRTd/kggQSwydThBmnXodHG+z92I0xkZV8zDzSC:dRTFkg3SwyhsXoRG+zAkZCzDz/
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer