c0dd8a6a4a98649c53908ee5f50453001b26e57a34492c9d7345e8ddf262b8cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0dd8a6a4a98649c53908ee5f50453001b26e57a34492c9d7345e8ddf262b8cd
Size

781KB
Sample

221121-3mbm4abf77
MD5

2b0a66a79224c45c53e867ebfca86225
SHA1

3d8b3886176373d7e36e26f9a971356a78cc0739
SHA256

c0dd8a6a4a98649c53908ee5f50453001b26e57a34492c9d7345e8ddf262b8cd
SHA512

a19dfd7083cb5e8e2ff8c46ffb0e4a83b19b4eb08f837919c8dd2350071338a48bcbc8e1d8e4553c3d24d394eb669fdd3b9becdb8e6182071484b90673985b51
SSDEEP

24576:h1OYdaOk4qKGOWDD9ggAXwpScOgPEfeh3u:h1OsyPOWDD9hu

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c0dd8a6a4a98649c53908ee5f50453001b26e57a34492c9d7345e8ddf262b8cd
- Size
  
  781KB
- MD5
  
  2b0a66a79224c45c53e867ebfca86225
- SHA1
  
  3d8b3886176373d7e36e26f9a971356a78cc0739
- SHA256
  
  c0dd8a6a4a98649c53908ee5f50453001b26e57a34492c9d7345e8ddf262b8cd
- SHA512
  
  a19dfd7083cb5e8e2ff8c46ffb0e4a83b19b4eb08f837919c8dd2350071338a48bcbc8e1d8e4553c3d24d394eb669fdd3b9becdb8e6182071484b90673985b51
- SSDEEP
  
  24576:h1OYdaOk4qKGOWDD9ggAXwpScOgPEfeh3u:h1OsyPOWDD9hu
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer