484e005403ef562ce8676f4a6669ce9e5fbef9db52766c96c0228f53af237d09 | Triage

Sharing

General

Target

484e005403ef562ce8676f4a6669ce9e5fbef9db52766c96c0228f53af237d09
Size

33KB
Sample

241121-hethqazjhv
MD5

5b653ac1a80f0bf1d5f481b3f26870ec
SHA1

88da99a3a16369cdeeb3ce0b5e7278480e804fdc
SHA256

484e005403ef562ce8676f4a6669ce9e5fbef9db52766c96c0228f53af237d09
SHA512

38948a310b13ca4f0117b263973b0aef9fbe20dfee8d76d1bcba5be0149d6d9a31d7cff03b7e615c442ab3fd3e9410a3ab512f42377660782cb6a56947a71ac6
SSDEEP

768:2gQm2kElOIEvzMXqtwp/lttaL7HP4EUi91acSWGoYoLVCm1:2g4kaYzMXqtGNttyeiZnZLYm1

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  484e005403ef562ce8676f4a6669ce9e5fbef9db52766c96c0228f53af237d09
- Size
  
  33KB
- MD5
  
  5b653ac1a80f0bf1d5f481b3f26870ec
- SHA1
  
  88da99a3a16369cdeeb3ce0b5e7278480e804fdc
- SHA256
  
  484e005403ef562ce8676f4a6669ce9e5fbef9db52766c96c0228f53af237d09
- SHA512
  
  38948a310b13ca4f0117b263973b0aef9fbe20dfee8d76d1bcba5be0149d6d9a31d7cff03b7e615c442ab3fd3e9410a3ab512f42377660782cb6a56947a71ac6
- SSDEEP
  
  768:2gQm2kElOIEvzMXqtwp/lttaL7HP4EUi91acSWGoYoLVCm1:2g4kaYzMXqtGNttyeiZnZLYm1
Score

8^/10

discovery spyware stealer
- Drops file in Drivers directory
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer