c9c5ff7934d3cff112043ead7efec67873543d5e5e77eb282606b6fda47c14aa | Triage

Sharing

General

Target

c9c5ff7934d3cff112043ead7efec67873543d5e5e77eb282606b6fda47c14aa
Size

920KB
Sample

221124-xz2gdsdf47
MD5

4715140de1b05dd428a230c1179b4e90
SHA1

a806b83a740d0136fbfa86d88c1388751594c30a
SHA256

c9c5ff7934d3cff112043ead7efec67873543d5e5e77eb282606b6fda47c14aa
SHA512

2d02f111282eef2ec108fe6293fb5b48bf61f9adc7b5d1cc07fc5ab0df80aa934ce6a5fedc27fa5074109232b4b0069d16437959b5bd39a544aa63ea5dee4280
SSDEEP

24576:h1OYdaObMtdHAqcdDVhYwiei7+EpFAh/kKd:h1Os6PHVmVhYwiLtKkKd

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c9c5ff7934d3cff112043ead7efec67873543d5e5e77eb282606b6fda47c14aa
- Size
  
  920KB
- MD5
  
  4715140de1b05dd428a230c1179b4e90
- SHA1
  
  a806b83a740d0136fbfa86d88c1388751594c30a
- SHA256
  
  c9c5ff7934d3cff112043ead7efec67873543d5e5e77eb282606b6fda47c14aa
- SHA512
  
  2d02f111282eef2ec108fe6293fb5b48bf61f9adc7b5d1cc07fc5ab0df80aa934ce6a5fedc27fa5074109232b4b0069d16437959b5bd39a544aa63ea5dee4280
- SSDEEP
  
  24576:h1OYdaObMtdHAqcdDVhYwiei7+EpFAh/kKd:h1Os6PHVmVhYwiLtKkKd
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer