fd87601ecfb7c14a737982d56407593a4530ac9420c6845d2b9ed279ce13c8b7 | Triage

Sharing

General

Target

fd87601ecfb7c14a737982d56407593a4530ac9420c6845d2b9ed279ce13c8b7
Size

927KB
Sample

221124-tylsrsad9s
MD5

d5feb731d648f20797726724f48e163f
SHA1

5165bce27db5d3f44ddf7b71611fe7fa5222f6a4
SHA256

fd87601ecfb7c14a737982d56407593a4530ac9420c6845d2b9ed279ce13c8b7
SHA512

c74aa57af3b0f419974679d02dc53144c03b49bcbd76711b3967cbac9c748985eaac2a73bd26e6a984b6e0fc4809b0300e6c815ed15dc58f1835b7abd1f20d5a
SSDEEP

24576:h1OYdaOmnQju5vMu6qN2FctIOBYXZBai3GBlgpKLe/7r8:h1OskQjO6HHzayGBe/7r8

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  fd87601ecfb7c14a737982d56407593a4530ac9420c6845d2b9ed279ce13c8b7
- Size
  
  927KB
- MD5
  
  d5feb731d648f20797726724f48e163f
- SHA1
  
  5165bce27db5d3f44ddf7b71611fe7fa5222f6a4
- SHA256
  
  fd87601ecfb7c14a737982d56407593a4530ac9420c6845d2b9ed279ce13c8b7
- SHA512
  
  c74aa57af3b0f419974679d02dc53144c03b49bcbd76711b3967cbac9c748985eaac2a73bd26e6a984b6e0fc4809b0300e6c815ed15dc58f1835b7abd1f20d5a
- SSDEEP
  
  24576:h1OYdaOmnQju5vMu6qN2FctIOBYXZBai3GBlgpKLe/7r8:h1OskQjO6HHzayGBe/7r8
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer