96bdc195d822cb77eb0c9158678db897a70585b31b049398fc1a603f6af0e008 | Triage

Sharing

General

Target

96bdc195d822cb77eb0c9158678db897a70585b31b049398fc1a603f6af0e008
Size

924KB
Sample

221124-n9p2nsff2t
MD5

e7e174aab0f1564658f311c687d412db
SHA1

dbafe22814dd0aa92b5f6e0cdc56d744f4ba65fa
SHA256

96bdc195d822cb77eb0c9158678db897a70585b31b049398fc1a603f6af0e008
SHA512

9220a3cbb3126142f6b61b790c0bc320650628e347b90861f3dd5e899a1f4d5da3ee8933c4272f98e0030bed5db952dfdee232fc22552c47a1b6832d13994cfd
SSDEEP

24576:h1OYdaOPfC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuXN:h1OseMN6wdBh5N5Z4E8PuXN

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  96bdc195d822cb77eb0c9158678db897a70585b31b049398fc1a603f6af0e008
- Size
  
  924KB
- MD5
  
  e7e174aab0f1564658f311c687d412db
- SHA1
  
  dbafe22814dd0aa92b5f6e0cdc56d744f4ba65fa
- SHA256
  
  96bdc195d822cb77eb0c9158678db897a70585b31b049398fc1a603f6af0e008
- SHA512
  
  9220a3cbb3126142f6b61b790c0bc320650628e347b90861f3dd5e899a1f4d5da3ee8933c4272f98e0030bed5db952dfdee232fc22552c47a1b6832d13994cfd
- SSDEEP
  
  24576:h1OYdaOPfC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuXN:h1OseMN6wdBh5N5Z4E8PuXN
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer