00e316ee5d88b2ca318612360f1aafbefc7b9c6127023d3b6ada76173f64f9a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00e316ee5d88b2ca318612360f1aafbefc7b9c6127023d3b6ada76173f64f9a7
Size

33KB
Sample

240906-p5v8kaxclr
MD5

c4014662d832df5c66319bcc11073363
SHA1

0a0432269a3ba085740c094bff4dec44d558fc2a
SHA256

00e316ee5d88b2ca318612360f1aafbefc7b9c6127023d3b6ada76173f64f9a7
SHA512

b4c4bf5c48fe5385eba1c2a101d7687481067c9058e8b72180bac7166c106222ec264a70e56d4ef20934465c47baadbd115e421601ffa9cf6f65e669ef0c4e85
SSDEEP

768:KHJYRO5RroZJ76739sBWs69a7zKHOrEz+mKLtOWD:KHwe+Zk78UKUW

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  00e316ee5d88b2ca318612360f1aafbefc7b9c6127023d3b6ada76173f64f9a7
- Size
  
  33KB
- MD5
  
  c4014662d832df5c66319bcc11073363
- SHA1
  
  0a0432269a3ba085740c094bff4dec44d558fc2a
- SHA256
  
  00e316ee5d88b2ca318612360f1aafbefc7b9c6127023d3b6ada76173f64f9a7
- SHA512
  
  b4c4bf5c48fe5385eba1c2a101d7687481067c9058e8b72180bac7166c106222ec264a70e56d4ef20934465c47baadbd115e421601ffa9cf6f65e669ef0c4e85
- SSDEEP
  
  768:KHJYRO5RroZJ76739sBWs69a7zKHOrEz+mKLtOWD:KHwe+Zk78UKUW
Score

7^/10

discovery spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer