fd46df366b442a37f79ca13f65acab0bbd9a4afbbc0fe8f8048ba9699bab7db1 | Triage

Sharing

General

Target

fd46df366b442a37f79ca13f65acab0bbd9a4afbbc0fe8f8048ba9699bab7db1
Size

931KB
Sample

221124-ty25rafc36
MD5

c0532afae6398c9a18b71c55eb793f8b
SHA1

9130dadfb65f40df8f0b1ef2d573b2df923227fc
SHA256

fd46df366b442a37f79ca13f65acab0bbd9a4afbbc0fe8f8048ba9699bab7db1
SHA512

1994b21d5a3674d08e27d35aea41d72c33e8721d9c46313023b6b02334faee705261c749f3f91b5f4673ae838ebaebb07be4d25ee54a611595d0efcc1f54bcd0
SSDEEP

24576:h1OYdaOPCZ/iWCvu/2sWsJA/jlt+DHhsk:h1OsJCpYO/dJJDHhsk

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  fd46df366b442a37f79ca13f65acab0bbd9a4afbbc0fe8f8048ba9699bab7db1
- Size
  
  931KB
- MD5
  
  c0532afae6398c9a18b71c55eb793f8b
- SHA1
  
  9130dadfb65f40df8f0b1ef2d573b2df923227fc
- SHA256
  
  fd46df366b442a37f79ca13f65acab0bbd9a4afbbc0fe8f8048ba9699bab7db1
- SHA512
  
  1994b21d5a3674d08e27d35aea41d72c33e8721d9c46313023b6b02334faee705261c749f3f91b5f4673ae838ebaebb07be4d25ee54a611595d0efcc1f54bcd0
- SSDEEP
  
  24576:h1OYdaOPCZ/iWCvu/2sWsJA/jlt+DHhsk:h1OsJCpYO/dJJDHhsk
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2