aa36c9dda009d1191a763ae9ee43b21e90ee295cb006f13501c1bf199eb86865 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa36c9dda009d1191a763ae9ee43b21e90ee295cb006f13501c1bf199eb86865
Size

777KB
Sample

221123-2tta2sag69
MD5

bdb3a24aae809cee38305043406a8f47
SHA1

0f5d97ec67b5fce2c2cf314f7287396826f96ae9
SHA256

aa36c9dda009d1191a763ae9ee43b21e90ee295cb006f13501c1bf199eb86865
SHA512

7a951a7a52cf5e7b0521fd5b9dbdaf5afa5915920fcb59bbc6091630eb536b73865e86d9835ef9b32f0fbe1258a8db7d4a7c378aa8b684966fb389495d136112
SSDEEP

24576:h1OYdaO9M9WKfwIBWe9IWK7f6jd9YMhKTOoR0:h1OsyYIGWkf6jd9YMhKKL

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  aa36c9dda009d1191a763ae9ee43b21e90ee295cb006f13501c1bf199eb86865
- Size
  
  777KB
- MD5
  
  bdb3a24aae809cee38305043406a8f47
- SHA1
  
  0f5d97ec67b5fce2c2cf314f7287396826f96ae9
- SHA256
  
  aa36c9dda009d1191a763ae9ee43b21e90ee295cb006f13501c1bf199eb86865
- SHA512
  
  7a951a7a52cf5e7b0521fd5b9dbdaf5afa5915920fcb59bbc6091630eb536b73865e86d9835ef9b32f0fbe1258a8db7d4a7c378aa8b684966fb389495d136112
- SSDEEP
  
  24576:h1OYdaO9M9WKfwIBWe9IWK7f6jd9YMhKTOoR0:h1OsyYIGWkf6jd9YMhKKL
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer