93c38b3e21f2906f94471dec88390f98c5efcd0ae0c74f51492f4c1a6ecfdc4e | Triage

Sharing

General

Target

93c38b3e21f2906f94471dec88390f98c5efcd0ae0c74f51492f4c1a6ecfdc4e
Size

168KB
Sample

221123-qxjp8sfa94
MD5

043811bfa25fababa2942ac023594063
SHA1

e43e34a875fc2175db49711b61425a6c8366ea35
SHA256

93c38b3e21f2906f94471dec88390f98c5efcd0ae0c74f51492f4c1a6ecfdc4e
SHA512

6af961eb80db6abf5440507df682332b3fc8b04c7be7cd9e008ed56771395c436186a8f113c631d19a1924c0c810189d60ea1c809cbcf56cfd4d682670b0317f
SSDEEP

3072:9qEd4jClHeneczmVne1dvTCd2R5P7P3YFuGy+M/n/GSm:QEa7zmVnEvTi2nDYFud+M/n/O

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  93c38b3e21f2906f94471dec88390f98c5efcd0ae0c74f51492f4c1a6ecfdc4e
- Size
  
  168KB
- MD5
  
  043811bfa25fababa2942ac023594063
- SHA1
  
  e43e34a875fc2175db49711b61425a6c8366ea35
- SHA256
  
  93c38b3e21f2906f94471dec88390f98c5efcd0ae0c74f51492f4c1a6ecfdc4e
- SHA512
  
  6af961eb80db6abf5440507df682332b3fc8b04c7be7cd9e008ed56771395c436186a8f113c631d19a1924c0c810189d60ea1c809cbcf56cfd4d682670b0317f
- SSDEEP
  
  3072:9qEd4jClHeneczmVne1dvTCd2R5P7P3YFuGy+M/n/GSm:QEa7zmVnEvTi2nDYFud+M/n/O
Score

7^/10

discovery spyware stealer
- Deletes itself
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer