dfbe55fb55536a56dd6406e37b30d734da98e44644038187feaa6ff8d3266c8c | Triage

Sharing

General

Target

dfbe55fb55536a56dd6406e37b30d734da98e44644038187feaa6ff8d3266c8c
Size

1.6MB
Sample

221123-s48daada88
MD5

1f4e5ee354bc22e33ef21b8990b263d2
SHA1

31bcbd04853778fa19570ef8f77c94dca7c41659
SHA256

dfbe55fb55536a56dd6406e37b30d734da98e44644038187feaa6ff8d3266c8c
SHA512

9663dbff00c4156e55b1fee997e91ad99388cecd8b222d4816b79cbf59c4241e16e52b8334d24d83485e8bf55ad3251b5466afa02f6a0fc03820a04482ee6c89
SSDEEP

24576:q8qRZaLO3yQ53DHUOaI6iW2vfT8WoeKHSH2wdnf+p/Aqk9Z5sqKWTcXkwMevDLr4:jLExt/WgNfp9Z5s9W4DLtmFj/

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  dfbe55fb55536a56dd6406e37b30d734da98e44644038187feaa6ff8d3266c8c
- Size
  
  1.6MB
- MD5
  
  1f4e5ee354bc22e33ef21b8990b263d2
- SHA1
  
  31bcbd04853778fa19570ef8f77c94dca7c41659
- SHA256
  
  dfbe55fb55536a56dd6406e37b30d734da98e44644038187feaa6ff8d3266c8c
- SHA512
  
  9663dbff00c4156e55b1fee997e91ad99388cecd8b222d4816b79cbf59c4241e16e52b8334d24d83485e8bf55ad3251b5466afa02f6a0fc03820a04482ee6c89
- SSDEEP
  
  24576:q8qRZaLO3yQ53DHUOaI6iW2vfT8WoeKHSH2wdnf+p/Aqk9Z5sqKWTcXkwMevDLr4:jLExt/WgNfp9Z5s9W4DLtmFj/
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer