c87086ff61177c95aa37f979714d01991f6b7f18185cac9615d677404050434e | Triage

Sharing

General

Target

c87086ff61177c95aa37f979714d01991f6b7f18185cac9615d677404050434e
Size

920KB
Sample

221124-x4ajgagh8t
MD5

f7d7b757a5e393cf3bc6656cde6e0147
SHA1

85dd3ea225562e1fcdbb02f020fbf88fb83c3b65
SHA256

c87086ff61177c95aa37f979714d01991f6b7f18185cac9615d677404050434e
SHA512

16bd538a642b329cc013061bdd0945828e9b1c5faf999124973ee6e6d490b235a8eac39294365edd7f22bde75bee41152beaef990fa9b2756c9af168a0e3db97
SSDEEP

24576:h1OYdaORMtdHAqcdDVhYwiei7+EpFAh/kK9:h1OsQPHVmVhYwiLtKkK9

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c87086ff61177c95aa37f979714d01991f6b7f18185cac9615d677404050434e
- Size
  
  920KB
- MD5
  
  f7d7b757a5e393cf3bc6656cde6e0147
- SHA1
  
  85dd3ea225562e1fcdbb02f020fbf88fb83c3b65
- SHA256
  
  c87086ff61177c95aa37f979714d01991f6b7f18185cac9615d677404050434e
- SHA512
  
  16bd538a642b329cc013061bdd0945828e9b1c5faf999124973ee6e6d490b235a8eac39294365edd7f22bde75bee41152beaef990fa9b2756c9af168a0e3db97
- SSDEEP
  
  24576:h1OYdaORMtdHAqcdDVhYwiei7+EpFAh/kK9:h1OsQPHVmVhYwiLtKkK9
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2