61127259cb98eb425a7347c4193d8188e1dbb8d0bf7be272bdbb7d88981f4758 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61127259cb98eb425a7347c4193d8188e1dbb8d0bf7be272bdbb7d88981f4758
Size

93KB
Sample

240914-atxvpayamc
MD5

da2c3124b37b03be53cf43a96b160660
SHA1

1bd706e5010e53d585daaa3c23eb6bcbeb160dfb
SHA256

61127259cb98eb425a7347c4193d8188e1dbb8d0bf7be272bdbb7d88981f4758
SHA512

ccf2c231d60948f70bddf222aebe02f0bb53c7a0eb515594fff24f124bde0daacc190ad26b970a8a4b4365e2a39732d27e37c45cd299a2e0ffdcbfa107751cb6
SSDEEP

1536:2HvaYzMXqtGNttyeiZnZLYm1byapmebn4ddJZeY86iLflLJYEIs67rxo:2HvaY46tGNttyeQLYm1WLK4ddJMY86iL

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  61127259cb98eb425a7347c4193d8188e1dbb8d0bf7be272bdbb7d88981f4758
- Size
  
  93KB
- MD5
  
  da2c3124b37b03be53cf43a96b160660
- SHA1
  
  1bd706e5010e53d585daaa3c23eb6bcbeb160dfb
- SHA256
  
  61127259cb98eb425a7347c4193d8188e1dbb8d0bf7be272bdbb7d88981f4758
- SHA512
  
  ccf2c231d60948f70bddf222aebe02f0bb53c7a0eb515594fff24f124bde0daacc190ad26b970a8a4b4365e2a39732d27e37c45cd299a2e0ffdcbfa107751cb6
- SSDEEP
  
  1536:2HvaYzMXqtGNttyeiZnZLYm1byapmebn4ddJZeY86iLflLJYEIs67rxo:2HvaY46tGNttyeQLYm1WLK4ddJMY86iL
Score

8^/10

discovery spyware stealer
- Drops file in Drivers directory
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2