4930e47c1bdf1e07c1693f1d61888d894c5b6dd2a362de4b1a87219bdeda3cbc | Triage

Sharing

General

Target

4930e47c1bdf1e07c1693f1d61888d894c5b6dd2a362de4b1a87219bdeda3cbc
Size

69KB
Sample

241013-h7tn7avdkg
MD5

2feb676c5f153761ef3769e1d9747c6b
SHA1

41c88ca92198c8f54dc7b3c6af6bed0076561558
SHA256

4930e47c1bdf1e07c1693f1d61888d894c5b6dd2a362de4b1a87219bdeda3cbc
SHA512

eb16f6cb4e89214df38cc30f37c9ca2361ebab150df3fd0be75eef52369d56dda3dce176fa1517817763967b179952068e34fe89043fedfea424c7e36cadb92c
SSDEEP

1536:8qGKFe+Zk7VJbwlYXjPrsqrZMYR5p8wZq9khDRGadegghOgmgk:85Ye+azbRPrlr9RXFI9k9dehhOgo

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  4930e47c1bdf1e07c1693f1d61888d894c5b6dd2a362de4b1a87219bdeda3cbc
- Size
  
  69KB
- MD5
  
  2feb676c5f153761ef3769e1d9747c6b
- SHA1
  
  41c88ca92198c8f54dc7b3c6af6bed0076561558
- SHA256
  
  4930e47c1bdf1e07c1693f1d61888d894c5b6dd2a362de4b1a87219bdeda3cbc
- SHA512
  
  eb16f6cb4e89214df38cc30f37c9ca2361ebab150df3fd0be75eef52369d56dda3dce176fa1517817763967b179952068e34fe89043fedfea424c7e36cadb92c
- SSDEEP
  
  1536:8qGKFe+Zk7VJbwlYXjPrsqrZMYR5p8wZq9khDRGadegghOgmgk:85Ye+azbRPrlr9RXFI9k9dehhOgo
Score

7^/10

discovery spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer