5e88e84aed8d0ff539376a0e33288ea1792049cc856a276705463677225e002a | Triage

Sharing

General

Target

5e88e84aed8d0ff539376a0e33288ea1792049cc856a276705463677225e002a
Size

924KB
Sample

221124-h2h1habb2v
MD5

f897dab24e8dcf3fa5446caee47b6a4a
SHA1

d2da9bb384b18890ce2f8b8791899f21a88d9b9c
SHA256

5e88e84aed8d0ff539376a0e33288ea1792049cc856a276705463677225e002a
SHA512

a82d199aedeba03e5519ebdc229307251e96a11db766ef04b5d6e890cfd8015cfa660bd2a63515eebe84f8453c424e6e28230e6fcec578a1ae555fc638ca7b8b
SSDEEP

24576:h1OYdaOhfC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuX2:h1OsEMN6wdBh5N5Z4E8PuX2

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  5e88e84aed8d0ff539376a0e33288ea1792049cc856a276705463677225e002a
- Size
  
  924KB
- MD5
  
  f897dab24e8dcf3fa5446caee47b6a4a
- SHA1
  
  d2da9bb384b18890ce2f8b8791899f21a88d9b9c
- SHA256
  
  5e88e84aed8d0ff539376a0e33288ea1792049cc856a276705463677225e002a
- SHA512
  
  a82d199aedeba03e5519ebdc229307251e96a11db766ef04b5d6e890cfd8015cfa660bd2a63515eebe84f8453c424e6e28230e6fcec578a1ae555fc638ca7b8b
- SSDEEP
  
  24576:h1OYdaOhfC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuX2:h1OsEMN6wdBh5N5Z4E8PuX2
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer