8890da59fa55d62e7f2af20ae300610c1525502a9ffe54a8e39802bf6fccd45a | Triage

Sharing

General

Target

8890da59fa55d62e7f2af20ae300610c1525502a9ffe54a8e39802bf6fccd45a
Size

1.1MB
Sample

221124-jhzdtacc7s
MD5

e5c90586782654161d367a0b917f2c11
SHA1

6bd3a5befce8d8853e56689fe5379ad213774915
SHA256

8890da59fa55d62e7f2af20ae300610c1525502a9ffe54a8e39802bf6fccd45a
SHA512

d416a6b80acbb9c610d96b57ff7142a5c4b8d4d750b25952718031118dc004e1c2b2c14fb62e887d855a173ad39b40681fce7f9c4fcd5f21124ae3277c67064a
SSDEEP

24576:iZuufNfHuZDIahRUJ8laSNovBq0fTQ+thff0lXh:iXf8hhraJLTztlmh

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  8890da59fa55d62e7f2af20ae300610c1525502a9ffe54a8e39802bf6fccd45a
- Size
  
  1.1MB
- MD5
  
  e5c90586782654161d367a0b917f2c11
- SHA1
  
  6bd3a5befce8d8853e56689fe5379ad213774915
- SHA256
  
  8890da59fa55d62e7f2af20ae300610c1525502a9ffe54a8e39802bf6fccd45a
- SHA512
  
  d416a6b80acbb9c610d96b57ff7142a5c4b8d4d750b25952718031118dc004e1c2b2c14fb62e887d855a173ad39b40681fce7f9c4fcd5f21124ae3277c67064a
- SSDEEP
  
  24576:iZuufNfHuZDIahRUJ8laSNovBq0fTQ+thff0lXh:iXf8hhraJLTztlmh
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer