9eddfab0abd838194774dae5ae70be6040aae8b0d19a96fed87688624e83c380 | Triage

Sharing

General

Target

9eddfab0abd838194774dae5ae70be6040aae8b0d19a96fed87688624e83c380
Size

924KB
Sample

221124-mx3lkahc85
MD5

7919e4bbc70ae70c376f0f6145f3a2c1
SHA1

73ab273cffe14795cf3d0552429f77fe05302f24
SHA256

9eddfab0abd838194774dae5ae70be6040aae8b0d19a96fed87688624e83c380
SHA512

f1b7e6f8669192fc67ae7e8e0657b549f5c420296d487ea259b76f33b6fd7939f1793d278b03c20a8f454e2fb1df9997d3337d0fd344031eeb8d0101872bcdad
SSDEEP

24576:h1OYdaOv4BQGx2jUReefMaGeOPw8Y7H3b+QK:h1Osp4BQ02o4efMz68Y/+QK

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  9eddfab0abd838194774dae5ae70be6040aae8b0d19a96fed87688624e83c380
- Size
  
  924KB
- MD5
  
  7919e4bbc70ae70c376f0f6145f3a2c1
- SHA1
  
  73ab273cffe14795cf3d0552429f77fe05302f24
- SHA256
  
  9eddfab0abd838194774dae5ae70be6040aae8b0d19a96fed87688624e83c380
- SHA512
  
  f1b7e6f8669192fc67ae7e8e0657b549f5c420296d487ea259b76f33b6fd7939f1793d278b03c20a8f454e2fb1df9997d3337d0fd344031eeb8d0101872bcdad
- SSDEEP
  
  24576:h1OYdaOv4BQGx2jUReefMaGeOPw8Y7H3b+QK:h1Osp4BQ02o4efMz68Y/+QK
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer