c9c434ac6b804a159b53586970f5c92dd0882e5d34648b911807a0d5eb6e802e | Triage

Sharing

General

Target

c9c434ac6b804a159b53586970f5c92dd0882e5d34648b911807a0d5eb6e802e
Size

920KB
Sample

221124-xz4azsgg2w
MD5

2919e8b636089067836f112891a30556
SHA1

d2902c37ec22f687849111e0f5996671c25a920c
SHA256

c9c434ac6b804a159b53586970f5c92dd0882e5d34648b911807a0d5eb6e802e
SHA512

ceb520a93de3b401cf43c43e1e83bae55a9743f468fcd71904c809610a4b75a7645e2525a65493dce06028c9eae033d396cabce3740ece3be63a8cd5551d4dea
SSDEEP

24576:h1OYdaOvMtdHAqcdDVhYwiei7+EpFAh/kKg:h1OsGPHVmVhYwiLtKkKg

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c9c434ac6b804a159b53586970f5c92dd0882e5d34648b911807a0d5eb6e802e
- Size
  
  920KB
- MD5
  
  2919e8b636089067836f112891a30556
- SHA1
  
  d2902c37ec22f687849111e0f5996671c25a920c
- SHA256
  
  c9c434ac6b804a159b53586970f5c92dd0882e5d34648b911807a0d5eb6e802e
- SHA512
  
  ceb520a93de3b401cf43c43e1e83bae55a9743f468fcd71904c809610a4b75a7645e2525a65493dce06028c9eae033d396cabce3740ece3be63a8cd5551d4dea
- SSDEEP
  
  24576:h1OYdaOvMtdHAqcdDVhYwiei7+EpFAh/kKg:h1OsGPHVmVhYwiLtKkKg
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2