56de15534fdb0c9dab89c737c6c9cffcb2ef876e2044b41c19fa9a79ed4786bf | Triage

Sharing

General

Target

56de15534fdb0c9dab89c737c6c9cffcb2ef876e2044b41c19fa9a79ed4786bf
Size

2.8MB
Sample

221123-vpp99shf26
MD5

a0ce5cc83d767a1b14d385c3e108b327
SHA1

f342b71e98fdb0ef4eebb726d26c1dae5274de9d
SHA256

56de15534fdb0c9dab89c737c6c9cffcb2ef876e2044b41c19fa9a79ed4786bf
SHA512

98df4118b431a1368649f789e395526f7e7043962963a0b87a9553ec4dd1a8afc0932cf144b184ad657b5b2a54287da037f01fd09be547522dde569df45d7c7a
SSDEEP

49152:WNKRui7cB/vjT7IYL9/90bZaKHkLAhiRMUBt7fiCmgQ:M9iAt7r90bQuKXtu

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  56de15534fdb0c9dab89c737c6c9cffcb2ef876e2044b41c19fa9a79ed4786bf
- Size
  
  2.8MB
- MD5
  
  a0ce5cc83d767a1b14d385c3e108b327
- SHA1
  
  f342b71e98fdb0ef4eebb726d26c1dae5274de9d
- SHA256
  
  56de15534fdb0c9dab89c737c6c9cffcb2ef876e2044b41c19fa9a79ed4786bf
- SHA512
  
  98df4118b431a1368649f789e395526f7e7043962963a0b87a9553ec4dd1a8afc0932cf144b184ad657b5b2a54287da037f01fd09be547522dde569df45d7c7a
- SSDEEP
  
  49152:WNKRui7cB/vjT7IYL9/90bZaKHkLAhiRMUBt7fiCmgQ:M9iAt7r90bQuKXtu
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2