c857bef1c17171a31175e6f5be0eba4491a0a55b0db91d041f9b4223dbb580cd | Triage

Sharing

General

Target

c857bef1c17171a31175e6f5be0eba4491a0a55b0db91d041f9b4223dbb580cd
Size

3.1MB
Sample

240901-dtf4qazfnm
MD5

8e94d94ffb5f0a1daa35e46d567f7aee
SHA1

d885021314fd8a7010145bdec8a92935fc981949
SHA256

c857bef1c17171a31175e6f5be0eba4491a0a55b0db91d041f9b4223dbb580cd
SHA512

2ece2dcffdebf208458a86ff44d5e6923802c301b6d8523cf2a816012571dfc34408058ec6425b965a6ea998b0de1d7dd427fdceb787cdb3f6f031204f0c4645
SSDEEP

98304:LAcRTd/kggQSwydThBmnXodHG+z92I0xkZV8zDzSC:PRTFkg3SwyhsXoRG+zAkZCzDz/

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c857bef1c17171a31175e6f5be0eba4491a0a55b0db91d041f9b4223dbb580cd
- Size
  
  3.1MB
- MD5
  
  8e94d94ffb5f0a1daa35e46d567f7aee
- SHA1
  
  d885021314fd8a7010145bdec8a92935fc981949
- SHA256
  
  c857bef1c17171a31175e6f5be0eba4491a0a55b0db91d041f9b4223dbb580cd
- SHA512
  
  2ece2dcffdebf208458a86ff44d5e6923802c301b6d8523cf2a816012571dfc34408058ec6425b965a6ea998b0de1d7dd427fdceb787cdb3f6f031204f0c4645
- SSDEEP
  
  98304:LAcRTd/kggQSwydThBmnXodHG+z92I0xkZV8zDzSC:PRTFkg3SwyhsXoRG+zAkZCzDz/
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer