c3373efbfedfbc6e075e2b046a79eb8ea295bc1b52bdf7e788a42bc036b68cd3 | Triage

Sharing

General

Target

c3373efbfedfbc6e075e2b046a79eb8ea295bc1b52bdf7e788a42bc036b68cd3
Size

919KB
Sample

221124-ydqnfahe9z
MD5

1468f01dd00b4ec929c4ba48712373fc
SHA1

99f9febe8bfd3a758a7b795512eb85b5220c1c3d
SHA256

c3373efbfedfbc6e075e2b046a79eb8ea295bc1b52bdf7e788a42bc036b68cd3
SHA512

3be5bb8dfa02a435b497bbeae9794ac3e6e8b3be50fb956193d3b7fcd4db147b2c8ef00855b1fd3844973c4e83958a65099b75b8ed321c38192f70bcd0709ae5
SSDEEP

24576:h1OYdaOVMtdHAqcdDVhYwiei7+EpFAh/kKe:h1OsYPHVmVhYwiLtKkKe

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c3373efbfedfbc6e075e2b046a79eb8ea295bc1b52bdf7e788a42bc036b68cd3
- Size
  
  919KB
- MD5
  
  1468f01dd00b4ec929c4ba48712373fc
- SHA1
  
  99f9febe8bfd3a758a7b795512eb85b5220c1c3d
- SHA256
  
  c3373efbfedfbc6e075e2b046a79eb8ea295bc1b52bdf7e788a42bc036b68cd3
- SHA512
  
  3be5bb8dfa02a435b497bbeae9794ac3e6e8b3be50fb956193d3b7fcd4db147b2c8ef00855b1fd3844973c4e83958a65099b75b8ed321c38192f70bcd0709ae5
- SSDEEP
  
  24576:h1OYdaOVMtdHAqcdDVhYwiei7+EpFAh/kKe:h1OsYPHVmVhYwiLtKkKe
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer