c3ae51b1a05c7f1ebce766413958cff7740748d9c6d1e042b8f67db9232ae8f1 | Triage

Sharing

General

Target

c3ae51b1a05c7f1ebce766413958cff7740748d9c6d1e042b8f67db9232ae8f1
Size

927KB
Sample

221124-ycejsaed54
MD5

b74b2539835a9356b145073978fc3bfe
SHA1

b323e3ef3205fccfbbbdea290602968f6db9a61e
SHA256

c3ae51b1a05c7f1ebce766413958cff7740748d9c6d1e042b8f67db9232ae8f1
SHA512

9853494ade0183e0c2277d95d8a3d33d2b472cbeb7fba16d36566d92a6dc3698441330bdce606d33ed8cc04fa0315c4608258034f7004d41e00ff6fa859db246
SSDEEP

24576:h1OYdaOM6B06BenQju5vMu6qN2FctIOBYXZBai3GBlgpKLe/7r7:h1Os4QjO6HHzayGBe/7r7

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c3ae51b1a05c7f1ebce766413958cff7740748d9c6d1e042b8f67db9232ae8f1
- Size
  
  927KB
- MD5
  
  b74b2539835a9356b145073978fc3bfe
- SHA1
  
  b323e3ef3205fccfbbbdea290602968f6db9a61e
- SHA256
  
  c3ae51b1a05c7f1ebce766413958cff7740748d9c6d1e042b8f67db9232ae8f1
- SHA512
  
  9853494ade0183e0c2277d95d8a3d33d2b472cbeb7fba16d36566d92a6dc3698441330bdce606d33ed8cc04fa0315c4608258034f7004d41e00ff6fa859db246
- SSDEEP
  
  24576:h1OYdaOM6B06BenQju5vMu6qN2FctIOBYXZBai3GBlgpKLe/7r7:h1Os4QjO6HHzayGBe/7r7
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2