68f51e5bf82634a81aa37b4940282ab8a8bcc8264dea7fe316069ad7aa1430ad | Triage

Sharing

General

Target

68f51e5bf82634a81aa37b4940282ab8a8bcc8264dea7fe316069ad7aa1430ad
Size

2.7MB
Sample

221123-vgv6jsha39
MD5

00b7bbad9ba58ead2c32c620188e5daa
SHA1

bfee7c7749e8c58c6b3b933fc31a86dce8755398
SHA256

68f51e5bf82634a81aa37b4940282ab8a8bcc8264dea7fe316069ad7aa1430ad
SHA512

e6cca8b4911f3894c113c909e86b662bcc5c7a86f9ec7293d3c1a43744c529d938e4aab6686950c876ddd9b9f7acb0656dfcf91096e19b0b921851d53404f91c
SSDEEP

49152:d5WRLVE2NJYf5CUvZThdgY5+rg5i+CuuD7zrjbV8qPsYFX1:KRRE8qhdgY8rEFc8A

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  68f51e5bf82634a81aa37b4940282ab8a8bcc8264dea7fe316069ad7aa1430ad
- Size
  
  2.7MB
- MD5
  
  00b7bbad9ba58ead2c32c620188e5daa
- SHA1
  
  bfee7c7749e8c58c6b3b933fc31a86dce8755398
- SHA256
  
  68f51e5bf82634a81aa37b4940282ab8a8bcc8264dea7fe316069ad7aa1430ad
- SHA512
  
  e6cca8b4911f3894c113c909e86b662bcc5c7a86f9ec7293d3c1a43744c529d938e4aab6686950c876ddd9b9f7acb0656dfcf91096e19b0b921851d53404f91c
- SSDEEP
  
  49152:d5WRLVE2NJYf5CUvZThdgY5+rg5i+CuuD7zrjbV8qPsYFX1:KRRE8qhdgY8rEFc8A
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer