aeb4d17cedefca5547aa8d24cf419469e23c45fb45116738df5a909b913b7871 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aeb4d17cedefca5547aa8d24cf419469e23c45fb45116738df5a909b913b7871
Size

63KB
Sample

240913-hxtlfazhlr
MD5

56aedd8a9ac10f51bad8f74556910f7f
SHA1

98bf967281e54ccacf0932031e6fa7763e9f8904
SHA256

aeb4d17cedefca5547aa8d24cf419469e23c45fb45116738df5a909b913b7871
SHA512

352c12b098378d4628e0efe06644b7e8de4d41d882099a3adbc88462272962f635089b07060942fd4a983725a14144b2ab0d3ca51ba9165521bd1c4d57e5f182
SSDEEP

1536:86e+Zk7VJbwlYXjPrsqrZMYR5p8ww6jWWvr78Pxc:86e+azbRPrlr9RXFweWWvrQxc

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  aeb4d17cedefca5547aa8d24cf419469e23c45fb45116738df5a909b913b7871
- Size
  
  63KB
- MD5
  
  56aedd8a9ac10f51bad8f74556910f7f
- SHA1
  
  98bf967281e54ccacf0932031e6fa7763e9f8904
- SHA256
  
  aeb4d17cedefca5547aa8d24cf419469e23c45fb45116738df5a909b913b7871
- SHA512
  
  352c12b098378d4628e0efe06644b7e8de4d41d882099a3adbc88462272962f635089b07060942fd4a983725a14144b2ab0d3ca51ba9165521bd1c4d57e5f182
- SSDEEP
  
  1536:86e+Zk7VJbwlYXjPrsqrZMYR5p8ww6jWWvr78Pxc:86e+azbRPrlr9RXFweWWvrQxc
Score

7^/10

discovery spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer