c36dd4d52a500535b21a359142b858a075a5d282bd550321dca7ea86fc9783f8 | Triage

Sharing

General

Target

c36dd4d52a500535b21a359142b858a075a5d282bd550321dca7ea86fc9783f8
Size

920KB
Sample

221124-yc5qzaed88
MD5

a108fddc4293d9b2c43fc8fabb7d8473
SHA1

518c232e89a8c6ee1f3766c91edf309d798872ed
SHA256

c36dd4d52a500535b21a359142b858a075a5d282bd550321dca7ea86fc9783f8
SHA512

c4d3db1fa3895ad9c3b771e20ef8b70fcb50132dc644f49783d5e935f2ee973c607b25e429efba7362dbdbbace6638e37f3f568160c0f3f227260fd39d9d8cad
SSDEEP

24576:h1OYdaOoMtdHAqcdDVhYwiei7+EpFAh/kKR:h1OsVPHVmVhYwiLtKkKR

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c36dd4d52a500535b21a359142b858a075a5d282bd550321dca7ea86fc9783f8
- Size
  
  920KB
- MD5
  
  a108fddc4293d9b2c43fc8fabb7d8473
- SHA1
  
  518c232e89a8c6ee1f3766c91edf309d798872ed
- SHA256
  
  c36dd4d52a500535b21a359142b858a075a5d282bd550321dca7ea86fc9783f8
- SHA512
  
  c4d3db1fa3895ad9c3b771e20ef8b70fcb50132dc644f49783d5e935f2ee973c607b25e429efba7362dbdbbace6638e37f3f568160c0f3f227260fd39d9d8cad
- SSDEEP
  
  24576:h1OYdaOoMtdHAqcdDVhYwiei7+EpFAh/kKR:h1OsVPHVmVhYwiLtKkKR
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer