cadc20fa65b5bc56c2df3f228bb4ce859247b69a8995ebfde88716c881ad4d07 | Triage

Sharing

General

Target

cadc20fa65b5bc56c2df3f228bb4ce859247b69a8995ebfde88716c881ad4d07
Size

920KB
Sample

221124-xxvwtsde26
MD5

30fe0c951b8c2beb96cfeb80c7f9e4a7
SHA1

940e17e8adc8dd036997282a64f38e90dcc83fd7
SHA256

cadc20fa65b5bc56c2df3f228bb4ce859247b69a8995ebfde88716c881ad4d07
SHA512

2a81ae0b4b1f21d8228442bdf0da5b1a83bc64ef9f0ade98bdf91c8ef1f99d0cfa9b43ec453cd7027852ac3ef600d6ce8f9415853611e966cbb32137cfecf067
SSDEEP

24576:h1OYdaOlMtdHAqcdDVhYwiei7+EpFAh/kKd:h1Os0PHVmVhYwiLtKkKd

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  cadc20fa65b5bc56c2df3f228bb4ce859247b69a8995ebfde88716c881ad4d07
- Size
  
  920KB
- MD5
  
  30fe0c951b8c2beb96cfeb80c7f9e4a7
- SHA1
  
  940e17e8adc8dd036997282a64f38e90dcc83fd7
- SHA256
  
  cadc20fa65b5bc56c2df3f228bb4ce859247b69a8995ebfde88716c881ad4d07
- SHA512
  
  2a81ae0b4b1f21d8228442bdf0da5b1a83bc64ef9f0ade98bdf91c8ef1f99d0cfa9b43ec453cd7027852ac3ef600d6ce8f9415853611e966cbb32137cfecf067
- SSDEEP
  
  24576:h1OYdaOlMtdHAqcdDVhYwiei7+EpFAh/kKd:h1Os0PHVmVhYwiLtKkKd
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer