5f10fc02c8a2033c07ffc8815022e9cdd3995ea0a63809f90e46a96b2a8e95a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f10fc02c8a2033c07ffc8815022e9cdd3995ea0a63809f90e46a96b2a8e95a8
Size

723KB
Sample

240901-cpejnaygmf
MD5

13c4828b8bcb8b044c9a36d04c813510
SHA1

a176fc6ba11ccfddaaf0fa38c4c74cfd4cbd71a1
SHA256

5f10fc02c8a2033c07ffc8815022e9cdd3995ea0a63809f90e46a96b2a8e95a8
SHA512

68f420e1c078a5f89288aa16a9c88390725afadb3d883e8d1f994ec93a58532e70fa1ea45cb6a175b38e27b6cc95d132e1ada2ac5f4e81d5dfbeb20031856ccb
SSDEEP

12288:l+affC6Aj+TN5uixZN+8rKhUdTC/wE1ZD0Ca5ZIXV:lB3LOS2opPIXV

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  5f10fc02c8a2033c07ffc8815022e9cdd3995ea0a63809f90e46a96b2a8e95a8
- Size
  
  723KB
- MD5
  
  13c4828b8bcb8b044c9a36d04c813510
- SHA1
  
  a176fc6ba11ccfddaaf0fa38c4c74cfd4cbd71a1
- SHA256
  
  5f10fc02c8a2033c07ffc8815022e9cdd3995ea0a63809f90e46a96b2a8e95a8
- SHA512
  
  68f420e1c078a5f89288aa16a9c88390725afadb3d883e8d1f994ec93a58532e70fa1ea45cb6a175b38e27b6cc95d132e1ada2ac5f4e81d5dfbeb20031856ccb
- SSDEEP
  
  12288:l+affC6Aj+TN5uixZN+8rKhUdTC/wE1ZD0Ca5ZIXV:lB3LOS2opPIXV
Score

7^/10

discovery spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer