cd22cb69a04954914cf245acc12d812a5b2134ffcf441e6a9b58b95203ddfb70 | Triage

Sharing

General

Target

cd22cb69a04954914cf245acc12d812a5b2134ffcf441e6a9b58b95203ddfb70
Size

2.0MB
Sample

240902-b2ybvsygjc
MD5

8ba0e5289c1b94a6bdbfd5817f9c4a23
SHA1

9dc23b17e76e24a24309c4332905b757f4cc9713
SHA256

cd22cb69a04954914cf245acc12d812a5b2134ffcf441e6a9b58b95203ddfb70
SHA512

59f101a2ada5fa2d8a2b68fa2233ec9a2f7070e9e45141b8172528f949ea5be96137a295d84d9009b3b1ffe8540f9b24358bf25491ce3c50982268f4184032f0
SSDEEP

49152:RVAbwLvWVtw64YdUZBg+/yOaLCCxSwsgsO9evVO8AnrZ4EoedMij:3A4vLYK8MaBxSMcRAmEoe+K

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  cd22cb69a04954914cf245acc12d812a5b2134ffcf441e6a9b58b95203ddfb70
- Size
  
  2.0MB
- MD5
  
  8ba0e5289c1b94a6bdbfd5817f9c4a23
- SHA1
  
  9dc23b17e76e24a24309c4332905b757f4cc9713
- SHA256
  
  cd22cb69a04954914cf245acc12d812a5b2134ffcf441e6a9b58b95203ddfb70
- SHA512
  
  59f101a2ada5fa2d8a2b68fa2233ec9a2f7070e9e45141b8172528f949ea5be96137a295d84d9009b3b1ffe8540f9b24358bf25491ce3c50982268f4184032f0
- SSDEEP
  
  49152:RVAbwLvWVtw64YdUZBg+/yOaLCCxSwsgsO9evVO8AnrZ4EoedMij:3A4vLYK8MaBxSMcRAmEoe+K
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer