fdacf2eb5001f749571fd8ed9595ecf36f592fa65013aa3a55a2feb89ff8a2cd | Triage

Sharing

General

Target

fdacf2eb5001f749571fd8ed9595ecf36f592fa65013aa3a55a2feb89ff8a2cd
Size

931KB
Sample

221124-tx87nsad7x
MD5

c904c8370476107e99a07e970ad5ea83
SHA1

acf253fd154beadbc031f2f9fcc539637c4b5470
SHA256

fdacf2eb5001f749571fd8ed9595ecf36f592fa65013aa3a55a2feb89ff8a2cd
SHA512

e6f33dc6cf79fbb617ee8933d193ca080b9a4f2921a65d1bc289b7ded095293d463c933fba715b6370692c9cf19dbca88ab0de1bc6bac847b08a36857914a26e
SSDEEP

24576:h1OYdaOiCZ/iWCvu/2sWsJA/jlt+DHhse:h1Os4CpYO/dJJDHhse

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  fdacf2eb5001f749571fd8ed9595ecf36f592fa65013aa3a55a2feb89ff8a2cd
- Size
  
  931KB
- MD5
  
  c904c8370476107e99a07e970ad5ea83
- SHA1
  
  acf253fd154beadbc031f2f9fcc539637c4b5470
- SHA256
  
  fdacf2eb5001f749571fd8ed9595ecf36f592fa65013aa3a55a2feb89ff8a2cd
- SHA512
  
  e6f33dc6cf79fbb617ee8933d193ca080b9a4f2921a65d1bc289b7ded095293d463c933fba715b6370692c9cf19dbca88ab0de1bc6bac847b08a36857914a26e
- SSDEEP
  
  24576:h1OYdaOiCZ/iWCvu/2sWsJA/jlt+DHhse:h1Os4CpYO/dJJDHhse
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2