3167a67f908870f6bec40ffdb660f18fadf2e3adecc30ccea68c388e7527e122 | Triage

Sharing

General

Target

3167a67f908870f6bec40ffdb660f18fadf2e3adecc30ccea68c388e7527e122
Size

67KB
Sample

240908-l2kqwasbna
MD5

54670b38fc5e3a71e6b2cf20548ca53a
SHA1

90efa1d6bab580adf062eb52bc7786607add66e5
SHA256

3167a67f908870f6bec40ffdb660f18fadf2e3adecc30ccea68c388e7527e122
SHA512

74d60c20580bbcc1a9c87c51497cb8b6d71516f9c9f9a8cdf427b634542d86c697d535e0c1a0722556df882f667bdaf0d1fa9fc52ac7079a99e58489b162454f
SSDEEP

1536:25vaYzMXqtGNttyeiZnZLYm1L/MF0Vz5gpEaDoc:25vaY46tGNttyeQLYm1L/W0VzBaDP

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  3167a67f908870f6bec40ffdb660f18fadf2e3adecc30ccea68c388e7527e122
- Size
  
  67KB
- MD5
  
  54670b38fc5e3a71e6b2cf20548ca53a
- SHA1
  
  90efa1d6bab580adf062eb52bc7786607add66e5
- SHA256
  
  3167a67f908870f6bec40ffdb660f18fadf2e3adecc30ccea68c388e7527e122
- SHA512
  
  74d60c20580bbcc1a9c87c51497cb8b6d71516f9c9f9a8cdf427b634542d86c697d535e0c1a0722556df882f667bdaf0d1fa9fc52ac7079a99e58489b162454f
- SSDEEP
  
  1536:25vaYzMXqtGNttyeiZnZLYm1L/MF0Vz5gpEaDoc:25vaY46tGNttyeQLYm1L/W0VzBaDP
Score

8^/10

discovery spyware stealer
- Drops file in Drivers directory
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer