5c8e80a9e4c54fd692b01f1d59b89e99ff7081aa85def56c927bf813c4723e08 | Triage

Sharing

General

Target

5c8e80a9e4c54fd692b01f1d59b89e99ff7081aa85def56c927bf813c4723e08
Size

2.4MB
Sample

221123-vml5tshd77
MD5

beee445005bb7e021badf10f20b81ced
SHA1

92080a641a14256973f57cb2d65567daf6d27496
SHA256

5c8e80a9e4c54fd692b01f1d59b89e99ff7081aa85def56c927bf813c4723e08
SHA512

d33e1d09b46b297fc675daa75fe155927d7e432fb09dc0b87e502a16fad20c50b36308559a785251f1d062f35c666421215884ab494bc93284904a7cf49b2e06
SSDEEP

49152:8pk0G1rP5fxgSCupn6sVGUUWDEbYrQ2CaT5zixZ5JN5i+CuuD7zrjbV8qPsYBHAE:8p7SrP5fqSCupn6B8DsYrIaT5zaZ5JjU

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  5c8e80a9e4c54fd692b01f1d59b89e99ff7081aa85def56c927bf813c4723e08
- Size
  
  2.4MB
- MD5
  
  beee445005bb7e021badf10f20b81ced
- SHA1
  
  92080a641a14256973f57cb2d65567daf6d27496
- SHA256
  
  5c8e80a9e4c54fd692b01f1d59b89e99ff7081aa85def56c927bf813c4723e08
- SHA512
  
  d33e1d09b46b297fc675daa75fe155927d7e432fb09dc0b87e502a16fad20c50b36308559a785251f1d062f35c666421215884ab494bc93284904a7cf49b2e06
- SSDEEP
  
  49152:8pk0G1rP5fxgSCupn6sVGUUWDEbYrQ2CaT5zixZ5JN5i+CuuD7zrjbV8qPsYBHAE:8p7SrP5fqSCupn6B8DsYrIaT5zaZ5JjU
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer