951e009adb8c5a2d34f5a9057b5a05ecc268b608c5c2fcfe2dee1ae4e1fbb5c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

951e009adb8c5a2d34f5a9057b5a05ecc268b608c5c2fcfe2dee1ae4e1fbb5c1
Size

33KB
Sample

240908-y9p2sawema
MD5

abdd02f0a8e8a7f67c4d2d5f390afa09
SHA1

794385506aa739fc62b83035f0f08ed16fa43e47
SHA256

951e009adb8c5a2d34f5a9057b5a05ecc268b608c5c2fcfe2dee1ae4e1fbb5c1
SHA512

85087a798d497e24df7cbdc4090722528659c40285f1f02fd65ddecd9d0fa233625d0e56a3cebcc778ea74fa7919b969451831101cb247b926eb1f17204c3137
SSDEEP

768:JnElOIEvzMXqtwp/lDTJg/MFksCRsd2u9C9MFWoVaZel:JnaYzMXqtGN/CstC9qVF

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  951e009adb8c5a2d34f5a9057b5a05ecc268b608c5c2fcfe2dee1ae4e1fbb5c1
- Size
  
  33KB
- MD5
  
  abdd02f0a8e8a7f67c4d2d5f390afa09
- SHA1
  
  794385506aa739fc62b83035f0f08ed16fa43e47
- SHA256
  
  951e009adb8c5a2d34f5a9057b5a05ecc268b608c5c2fcfe2dee1ae4e1fbb5c1
- SHA512
  
  85087a798d497e24df7cbdc4090722528659c40285f1f02fd65ddecd9d0fa233625d0e56a3cebcc778ea74fa7919b969451831101cb247b926eb1f17204c3137
- SSDEEP
  
  768:JnElOIEvzMXqtwp/lDTJg/MFksCRsd2u9C9MFWoVaZel:JnaYzMXqtGN/CstC9qVF
Score

8^/10

discovery spyware stealer
- Drops file in Drivers directory
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer