878628fbd3611ca93730e8df7e81fa34165480a71e875cbfc192fb83f97e386e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

878628fbd3611ca93730e8df7e81fa34165480a71e875cbfc192fb83f97e386e
Size

33KB
Sample

241012-ts986szaka
MD5

c4440056e06065be031cfa6acd94c763
SHA1

6c1f366e99fb096685fe30bab2f51d0a41dc7188
SHA256

878628fbd3611ca93730e8df7e81fa34165480a71e875cbfc192fb83f97e386e
SHA512

e8301dc938a9bc3b2205951171ca38d7c441e425d4d8e1e97ad82fb2b2f519ad4b9774d58b482183a50b769a7a16ec951ea828755c7433b454016b0fae2c86d4
SSDEEP

768:SGJYtpQFJFKZj1PVs9Ag1vzbaBrOF32zzFF+OtTDMm:SGZcx1aeg1viBxvCOt3

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  878628fbd3611ca93730e8df7e81fa34165480a71e875cbfc192fb83f97e386e
- Size
  
  33KB
- MD5
  
  c4440056e06065be031cfa6acd94c763
- SHA1
  
  6c1f366e99fb096685fe30bab2f51d0a41dc7188
- SHA256
  
  878628fbd3611ca93730e8df7e81fa34165480a71e875cbfc192fb83f97e386e
- SHA512
  
  e8301dc938a9bc3b2205951171ca38d7c441e425d4d8e1e97ad82fb2b2f519ad4b9774d58b482183a50b769a7a16ec951ea828755c7433b454016b0fae2c86d4
- SSDEEP
  
  768:SGJYtpQFJFKZj1PVs9Ag1vzbaBrOF32zzFF+OtTDMm:SGZcx1aeg1viBxvCOt3
Score

7^/10

discovery spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer