8644be74f6121dcefe6813ad30317d68cc26da1cc52b6237c909c2fc055fe3af | Triage

Sharing

General

Target

8644be74f6121dcefe6813ad30317d68cc26da1cc52b6237c909c2fc055fe3af
Size

1.6MB
Sample

221123-q3ey8sae7z
MD5

87e4fa393fd4835bd67798b3b9ce66fb
SHA1

f275ce9758be34c5b089d7d65f86a4b4ac5c2a93
SHA256

8644be74f6121dcefe6813ad30317d68cc26da1cc52b6237c909c2fc055fe3af
SHA512

c898f82a28dce433d03f9157d0e6ece14d3cd841e9c4c9d6d6f053cd1e1c1c38d80f817a18ae6a29bf6219581a8f5570d74d59b06f2619a7c25b6170510acfc2
SSDEEP

24576:eIqR5vrjhyv53DHGo2Hfi73PdD+vozKnfSg8kZv7Kr8+0f75xWvwTjhMXBQB:Grlo3z2f2WerQf75o4Tt

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  8644be74f6121dcefe6813ad30317d68cc26da1cc52b6237c909c2fc055fe3af
- Size
  
  1.6MB
- MD5
  
  87e4fa393fd4835bd67798b3b9ce66fb
- SHA1
  
  f275ce9758be34c5b089d7d65f86a4b4ac5c2a93
- SHA256
  
  8644be74f6121dcefe6813ad30317d68cc26da1cc52b6237c909c2fc055fe3af
- SHA512
  
  c898f82a28dce433d03f9157d0e6ece14d3cd841e9c4c9d6d6f053cd1e1c1c38d80f817a18ae6a29bf6219581a8f5570d74d59b06f2619a7c25b6170510acfc2
- SSDEEP
  
  24576:eIqR5vrjhyv53DHGo2Hfi73PdD+vozKnfSg8kZv7Kr8+0f75xWvwTjhMXBQB:Grlo3z2f2WerQf75o4Tt
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer