95434c716c955c75927fccb71f43c5e616cccb28107d5cda274f5f95ea029a4f | Triage

Sharing

General

Target

95434c716c955c75927fccb71f43c5e616cccb28107d5cda274f5f95ea029a4f
Size

795KB
Sample

221123-qw4n1sfa66
MD5

ac455902842b0446e5dc93ed2693dcde
SHA1

bd6b3972954dd9cbc90d67580e8a360415b73e6a
SHA256

95434c716c955c75927fccb71f43c5e616cccb28107d5cda274f5f95ea029a4f
SHA512

52220d58076e26c1d0b19713a7f99b71c402df9282bf7ef313afbceb8b16f24f94570405758d5b768bd39223ebb7d296a913ef155b696f0e3c8792e130b38d79
SSDEEP

24576:nNSkRXSgySpuCcN263qC0+W+NziCb8FTzNJ:okRi9mu/N266C0H53Tz

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  95434c716c955c75927fccb71f43c5e616cccb28107d5cda274f5f95ea029a4f
- Size
  
  795KB
- MD5
  
  ac455902842b0446e5dc93ed2693dcde
- SHA1
  
  bd6b3972954dd9cbc90d67580e8a360415b73e6a
- SHA256
  
  95434c716c955c75927fccb71f43c5e616cccb28107d5cda274f5f95ea029a4f
- SHA512
  
  52220d58076e26c1d0b19713a7f99b71c402df9282bf7ef313afbceb8b16f24f94570405758d5b768bd39223ebb7d296a913ef155b696f0e3c8792e130b38d79
- SSDEEP
  
  24576:nNSkRXSgySpuCcN263qC0+W+NziCb8FTzNJ:okRi9mu/N266C0H53Tz
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2