e31013c27ee61d04fb5674c57ef2164042dd2baacbccedd041b0e5243cf53e63 | Triage

Sharing

General

Target

e31013c27ee61d04fb5674c57ef2164042dd2baacbccedd041b0e5243cf53e63
Size

1.9MB
Sample

221123-s31baaga31
MD5

6e0e3ff43b8719c241b24fa5394ca57d
SHA1

62c238e0d6eca1a0fbb7b51a71e5c3d1a81a5a15
SHA256

e31013c27ee61d04fb5674c57ef2164042dd2baacbccedd041b0e5243cf53e63
SHA512

b83efad6edbf3579f8565c7a5cd30c84fdf24a72eb8b1fa3e466415854efba0749bac59620b5f2dec25ecc2d070dbad1bd2258cc9c5b9cc830f177f4fb540087
SSDEEP

49152:1Vm4YBAItfVLfrxlAuoW/8MouDUQh/UB5QA3fB:LmdWItNTroW/2mUQ

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  e31013c27ee61d04fb5674c57ef2164042dd2baacbccedd041b0e5243cf53e63
- Size
  
  1.9MB
- MD5
  
  6e0e3ff43b8719c241b24fa5394ca57d
- SHA1
  
  62c238e0d6eca1a0fbb7b51a71e5c3d1a81a5a15
- SHA256
  
  e31013c27ee61d04fb5674c57ef2164042dd2baacbccedd041b0e5243cf53e63
- SHA512
  
  b83efad6edbf3579f8565c7a5cd30c84fdf24a72eb8b1fa3e466415854efba0749bac59620b5f2dec25ecc2d070dbad1bd2258cc9c5b9cc830f177f4fb540087
- SSDEEP
  
  49152:1Vm4YBAItfVLfrxlAuoW/8MouDUQh/UB5QA3fB:LmdWItNTroW/2mUQ
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer