53ce52ffa0c37fe6f090366783eab6163ac039d1c1b13730fb1640031c8243df | Triage

Sharing

General

Target

53ce52ffa0c37fe6f090366783eab6163ac039d1c1b13730fb1640031c8243dfN
Size

242KB
Sample

241015-ffpj2szdkn
MD5

248c05ffc5214d6d892a4eaf572ab520
SHA1

497bc85f1d9645af350e1418be7e2c46891c3710
SHA256

53ce52ffa0c37fe6f090366783eab6163ac039d1c1b13730fb1640031c8243df
SHA512

974643827dcbdd9da678ee9035c3d359e183c66f8355b14194deeb093a0e4cb1a15f6548065a1539fb728fda2e5484f235020a575ac209e9f6752993be46b4b1
SSDEEP

6144:u6FJph/ox1M7JtLLpSVurRuTb2syNcGJNG:uekqtLLpFRuH2syF

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  53ce52ffa0c37fe6f090366783eab6163ac039d1c1b13730fb1640031c8243dfN
- Size
  
  242KB
- MD5
  
  248c05ffc5214d6d892a4eaf572ab520
- SHA1
  
  497bc85f1d9645af350e1418be7e2c46891c3710
- SHA256
  
  53ce52ffa0c37fe6f090366783eab6163ac039d1c1b13730fb1640031c8243df
- SHA512
  
  974643827dcbdd9da678ee9035c3d359e183c66f8355b14194deeb093a0e4cb1a15f6548065a1539fb728fda2e5484f235020a575ac209e9f6752993be46b4b1
- SSDEEP
  
  6144:u6FJph/ox1M7JtLLpSVurRuTb2syNcGJNG:uekqtLLpFRuH2syF
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer