782217990f16373c63bb2ca2919bb7171f7357b84ff1abf48d00c9e369da2b8c | Triage

Sharing

General

Target

782217990f16373c63bb2ca2919bb7171f7357b84ff1abf48d00c9e369da2b8cN
Size

52KB
Sample

240927-cykr2a1amq
MD5

68fd9d42e61c9c7c4e9ccb557068b4f0
SHA1

2adf9f47d9a5128d2c3b1a43146d42c3c66fc0d8
SHA256

782217990f16373c63bb2ca2919bb7171f7357b84ff1abf48d00c9e369da2b8c
SHA512

c4e05df4a4cfbadafb038f211df316a1cf586de9db0755ab0b7c1490fe66513bb783eb18f9e353dd65949ee51c1abcd9622f2ca696740a1c0bc967dad435ab60
SSDEEP

768:FlQ4hrvaEGU4aikqykezg2XpfY9jYioRoNFYl5:fLhE1Dezg2ZfYUoPO5

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  782217990f16373c63bb2ca2919bb7171f7357b84ff1abf48d00c9e369da2b8cN
- Size
  
  52KB
- MD5
  
  68fd9d42e61c9c7c4e9ccb557068b4f0
- SHA1
  
  2adf9f47d9a5128d2c3b1a43146d42c3c66fc0d8
- SHA256
  
  782217990f16373c63bb2ca2919bb7171f7357b84ff1abf48d00c9e369da2b8c
- SHA512
  
  c4e05df4a4cfbadafb038f211df316a1cf586de9db0755ab0b7c1490fe66513bb783eb18f9e353dd65949ee51c1abcd9622f2ca696740a1c0bc967dad435ab60
- SSDEEP
  
  768:FlQ4hrvaEGU4aikqykezg2XpfY9jYioRoNFYl5:fLhE1Dezg2ZfYUoPO5
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer