ec4cd7d2e69b75a1f7a39391847b91c737905c4a539bd511dc90b60c2c68eeee | Triage

Sharing

General

Target

ec4cd7d2e69b75a1f7a39391847b91c737905c4a539bd511dc90b60c2c68eeee
Size

519KB
Sample

240919-dl7ayaxfqh
MD5

358edc7f085aa887aacbc2de468a8051
SHA1

eb4fa12b34afe3c484fd0b3f243333be16bf2344
SHA256

ec4cd7d2e69b75a1f7a39391847b91c737905c4a539bd511dc90b60c2c68eeee
SHA512

c3d43b564f3ed012d7da6367cd5ba46520f813d9ae23542351bceafb98fdb259120672e23f1db159c6f12fd12fa17537e5cc2f1976914bbf1e3589059c580c10
SSDEEP

12288:dXCNi9BL8lu0WoU8iu8CfTcN3/r3BQ/ZLbjhxni+NAIh:oWLJCivSISRfjhxWIh

Score

7^/10

discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  ec4cd7d2e69b75a1f7a39391847b91c737905c4a539bd511dc90b60c2c68eeee
- Size
  
  519KB
- MD5
  
  358edc7f085aa887aacbc2de468a8051
- SHA1
  
  eb4fa12b34afe3c484fd0b3f243333be16bf2344
- SHA256
  
  ec4cd7d2e69b75a1f7a39391847b91c737905c4a539bd511dc90b60c2c68eeee
- SHA512
  
  c3d43b564f3ed012d7da6367cd5ba46520f813d9ae23542351bceafb98fdb259120672e23f1db159c6f12fd12fa17537e5cc2f1976914bbf1e3589059c580c10
- SSDEEP
  
  12288:dXCNi9BL8lu0WoU8iu8CfTcN3/r3BQ/ZLbjhxni+NAIh:oWLJCivSISRfjhxWIh
Score

7^/10

discovery persistence spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealer

behavioral2

discoverypersistencespywarestealer