cab54fcfc1f5811da6a5085a950326f71ff1e58d647fd3bff9c634fb2d350c03 | Triage

Sharing

General

Target

cab54fcfc1f5811da6a5085a950326f71ff1e58d647fd3bff9c634fb2d350c03
Size

920KB
Sample

221124-xx52ssge9z
MD5

724531dd8ba8baba630c358414cabdfe
SHA1

6491dad5699bcbc4505906d4df60f9beea974fad
SHA256

cab54fcfc1f5811da6a5085a950326f71ff1e58d647fd3bff9c634fb2d350c03
SHA512

dc9e4f79a0e7612cdde90aadece49124f67d08c456fad8c364395ee0407865951ef2f363ddde8dadfa3559a3c08e81650c9e1cd1a128e215ca4323bea90254c5
SSDEEP

24576:h1OYdaOgMtdHAqcdDVhYwiei7+EpFAh/kKh:h1OshPHVmVhYwiLtKkKh

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  cab54fcfc1f5811da6a5085a950326f71ff1e58d647fd3bff9c634fb2d350c03
- Size
  
  920KB
- MD5
  
  724531dd8ba8baba630c358414cabdfe
- SHA1
  
  6491dad5699bcbc4505906d4df60f9beea974fad
- SHA256
  
  cab54fcfc1f5811da6a5085a950326f71ff1e58d647fd3bff9c634fb2d350c03
- SHA512
  
  dc9e4f79a0e7612cdde90aadece49124f67d08c456fad8c364395ee0407865951ef2f363ddde8dadfa3559a3c08e81650c9e1cd1a128e215ca4323bea90254c5
- SSDEEP
  
  24576:h1OYdaOgMtdHAqcdDVhYwiei7+EpFAh/kKh:h1OshPHVmVhYwiLtKkKh
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer