4dabd9a7a474a4af0faf6474658a2c1fa4fe2b0d6e5c6678293132668ee43f8c | Triage

Sharing

General

Target

4dabd9a7a474a4af0faf6474658a2c1fa4fe2b0d6e5c6678293132668ee43f8c
Size

931KB
Sample

221124-jl755ahf46
MD5

2e1861756b6ffac9d522f6608b1b59da
SHA1

55bb8bd933e8882b76f2caf08fc3bf6e2f451449
SHA256

4dabd9a7a474a4af0faf6474658a2c1fa4fe2b0d6e5c6678293132668ee43f8c
SHA512

cdf5feea04790f747765de2b8a5cbfa6b593544fe02e29eab2a8515d3a3d61166b2cd67fde7d89e1d8797d6590a29abe60dac5c045926f5ab2e2d20f313d493c
SSDEEP

24576:h1OYdaOxMWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfX:h1OsDMWyUQ+GUVFIcHPvpfX

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  4dabd9a7a474a4af0faf6474658a2c1fa4fe2b0d6e5c6678293132668ee43f8c
- Size
  
  931KB
- MD5
  
  2e1861756b6ffac9d522f6608b1b59da
- SHA1
  
  55bb8bd933e8882b76f2caf08fc3bf6e2f451449
- SHA256
  
  4dabd9a7a474a4af0faf6474658a2c1fa4fe2b0d6e5c6678293132668ee43f8c
- SHA512
  
  cdf5feea04790f747765de2b8a5cbfa6b593544fe02e29eab2a8515d3a3d61166b2cd67fde7d89e1d8797d6590a29abe60dac5c045926f5ab2e2d20f313d493c
- SSDEEP
  
  24576:h1OYdaOxMWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfX:h1OsDMWyUQ+GUVFIcHPvpfX
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2