f97765208270784e1816793e041f23f2dccfee92fe6aa88762cc48bf3504bd90 | Triage

Sharing

General

Target

f97765208270784e1816793e041f23f2dccfee92fe6aa88762cc48bf3504bd90
Size

920KB
Sample

221124-t6321sba3y
MD5

8f3e1ea818d22a2c71563973b786fa46
SHA1

f66048e2fddd8a0f1c486dec982edb3251fc4f7c
SHA256

f97765208270784e1816793e041f23f2dccfee92fe6aa88762cc48bf3504bd90
SHA512

8075bd2917071040eddb7cc5f7ec8bacde78c95fbfb9e3846b9f24abd59af45411c162212cace2c2d7b3902dcc07e50ea6cf832e98136ada19fda13ae7fdc95a
SSDEEP

24576:h1OYdaOgMtdHAqcdDVhYwiei7+EpFAh/kKH:h1OshPHVmVhYwiLtKkKH

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  f97765208270784e1816793e041f23f2dccfee92fe6aa88762cc48bf3504bd90
- Size
  
  920KB
- MD5
  
  8f3e1ea818d22a2c71563973b786fa46
- SHA1
  
  f66048e2fddd8a0f1c486dec982edb3251fc4f7c
- SHA256
  
  f97765208270784e1816793e041f23f2dccfee92fe6aa88762cc48bf3504bd90
- SHA512
  
  8075bd2917071040eddb7cc5f7ec8bacde78c95fbfb9e3846b9f24abd59af45411c162212cace2c2d7b3902dcc07e50ea6cf832e98136ada19fda13ae7fdc95a
- SSDEEP
  
  24576:h1OYdaOgMtdHAqcdDVhYwiei7+EpFAh/kKH:h1OshPHVmVhYwiLtKkKH
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2